[29831] in Kerberos
Re: How to find out why credentials have expired
daemon@ATHENA.MIT.EDU (neelsmail@rediffmail.com)
Wed May 14 19:29:49 2008
From: neelsmail@rediffmail.com
Date: Wed, 14 May 2008 08:53:01 -0700 (PDT)
Message-ID: <2be7d5f8-fd4a-447a-86d4-f9db1a530a25@d19g2000prm.googlegroups.com>
Mime-Version: 1.0
X-Complaints-To: groups-abuse@google.com
Complaints-To: groups-abuse@google.com
To: kerberos@mit.edu
Content-Type: text/plain; charset="iso-8859-1"
Errors-To: kerberos-bounces@mit.edu
Content-Transfer-Encoding: 8bit
On May 14, 8:28 pm, Simo Sorce <sso...@redhat.com> wrote:
> On Wed, 2008-05-14 at 03:19 -0700, neelsm...@rediffmail.com wrote:
> > Hi,
>
> > I am using Kerberos 5 to authenticate an AD user from Linux RHEL 5.1
> > with NetworkManager installed. Every so often, a dialog box pops up
> > which asks for the credentials of the AD user. I wanted to know how
> > can I find out why and how his credentials have expired. Is there a
> > way to do that?
>
> It might be kerb_auth_dialog (a Red Hat helper package) popping up
> because your kerberos ticket is expired.
>
> Simo.
>
> --
> Simo Sorce * Red Hat, Inc * New York
Thank you _very_ much. Yes, it is krb5-auth-dialog. I have been
searching frantically for last couple of days why would it pop up.
When I do "kinit", klist (without any arguments) shows that krbtgt
ticket has been replaced by whatever host name I passed to kinit (with
-S option). When that happens, krb5-auth-dialog pops up. If I enter
correct password now, the ticket for host I sent to kinit gets
replaced again by krbtgt. Is that expected? The problem is it pops up
_everytime_. Is there a way to get around this behaviour? I tried
uninstalling NetworkManager, NetworkManager-gnome but that just makes
any commands after "kinit" fail with "Cannot find ticket for the
requested realm".
Thanks,
Neel.
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
