display authentification dialog rather than just using kerberos credentials

[James Bardin]

Binary package hint: gvfs-backends

A user's kerberos ticket is no longer used when accessing an smb share that requires authentication.
smbclient connects correctly with kerberos credentials.

This is a regression from 7.10.

ProblemType: Bug
Architecture: i386
Date: Tue Mar 25 14:07:06 2008
DistroRelease: Ubuntu 8.04
NonfreeKernelModules: nvidia
ProcEnviron:
 SHELL=/bin/bash
 PATH=/home/jbardin/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/usr/games
 LANG=en_US.UTF-8
Uname: Linux 2.6.24-12-generic i686

[Sebastien Bacher (seb128)]

Thank you for your bug report. gvfs uses libsmbclient and if that was working using gnomevfs that should be still working since what it does is similar. could you describe how to configure a setup to trigger the issue easily?

[James Bardin (jbardin-deactivatedaccount)]

when connecting to a samba/windows share in a kerberized (Active Directory) environment, in previous releases of gnome, gnomevfs would call libsmbclient using kerberos credentials if available.

If I have a valid ticket, I can call
smbclient -k //server/share
which will connect without prompting for password.

Opening the location smb://server/share in nautilus, will prompt for a password. This also doesn't "fall back" to using existing credentials if the password dialog is dismissed (which is expected, as a valid ticket should be tried first).

[James Bardin (jbardin-deactivatedaccount)]

Sorry, I double checked my last statement (my ticket wasn't what I thought it was).

It seems that the user is prompted for a password before kerberos is attempted, so gvfs *is* using kerberos correctly, ie. canceling the password prompt connects to the desired share.

gvfs just needs to try the kerberos auth before prompting the user for username/domain/passwd.

[Sebastien Bacher (seb128)]

The bug has been reported to the developers of the software. You can track it and make comments here: http://bugzilla.gnome.org/show_bug.cgi?id=524498

[Launchpad Janitor (janitor)]

This bug was fixed in the package gvfs - 1.0.0-0ubuntu1

---------------
gvfs (1.0.0-0ubuntu1) intrepid; urgency=low

  * New upstream version:
    - Bug fixes:
    524498 - smb kerberos authentication fixes (lp: #206698)

 -- Sebastien Bacher <email address hidden> Mon, 22 Sep 2008 14:43:05 +0200

[Joachim Breitner (nomeata)]

I have backported the patch to hardy, you can get the source at
http://packages.itomig.de/pool/main/g/gvfs/gvfs_0.2.5-0ubuntu7.itomig1.dsc, the binaries (i386) at http://packages.itomig.de/pool/main/g/gvfs/ or via apt-get with "deb http://packages.itomig.de/ hardy-itomig main"