| 2011-10-14 12:06:13 |
Ivan Razumov |
bug |
|
|
added bug |
| 2011-10-14 12:07:07 |
Ivan Razumov |
attachment added |
|
Patch to re-enable same-realm fallback for canonicalize errors https://bugs.launchpad.net/ubuntu/+source/krb5/+bug/874130/+attachment/2543104/+files/krb5.patch |
|
| 2011-10-14 12:07:34 |
Ivan Razumov |
description |
See bug 713518 in Redhat bugzilla: https://bugzilla.redhat.com/show_bug.cgi?id=713518.
Quoting:
Certain versions of the KDC software (included for example
in Red Hat Enterprise Linux 2.1 and 3) reject requests,
which include KDC options the software does not recognize,
and do not support the "canonicalize" option. When a client
was configured to use one of these versions of the KDC
software, the client failed to obtain credentials for
authentication to other services. This interoperability
regression was introduced in the update to Red Hat
Enterprise Linux 6.1. With this update, an upstream patch
has been provided to fix this bug.
I have applied the patch provided on this bugzilla page, and this fixed the problem.
ProblemType: Bug
DistroRelease: Ubuntu 11.10
Package: libkrb5-3 1.9.1+dfsg-1ubuntu1
ProcVersionSignature: Ubuntu 3.0.0-12.20-generic-pae 3.0.4
Uname: Linux 3.0.0-12-generic-pae i686
NonfreeKernelModules: nvidia
ApportVersion: 1.23-0ubuntu3
Architecture: i386
Date: Fri Oct 14 15:56:20 2011
InstallationMedia: Ubuntu 11.04 "Natty Narwhal" - Release i386 (20110427.1)
SourcePackage: krb5
UpgradeStatus: Upgraded to oneiric on 2011-10-13 (0 days ago) |
See RedHat bugzilla: https://bugzilla.redhat.com/show_bug.cgi?id=713518.
Quoting:
Certain versions of the KDC software (included for example
in Red Hat Enterprise Linux 2.1 and 3) reject requests,
which include KDC options the software does not recognize,
and do not support the "canonicalize" option. When a client
was configured to use one of these versions of the KDC
software, the client failed to obtain credentials for
authentication to other services. This interoperability
regression was introduced in the update to Red Hat
Enterprise Linux 6.1. With this update, an upstream patch
has been provided to fix this bug.
I have applied the patch provided on this bugzilla page, and this fixed the problem.
ProblemType: Bug
DistroRelease: Ubuntu 11.10
Package: libkrb5-3 1.9.1+dfsg-1ubuntu1
ProcVersionSignature: Ubuntu 3.0.0-12.20-generic-pae 3.0.4
Uname: Linux 3.0.0-12-generic-pae i686
NonfreeKernelModules: nvidia
ApportVersion: 1.23-0ubuntu3
Architecture: i386
Date: Fri Oct 14 15:56:20 2011
InstallationMedia: Ubuntu 11.04 "Natty Narwhal" - Release i386 (20110427.1)
SourcePackage: krb5
UpgradeStatus: Upgraded to oneiric on 2011-10-13 (0 days ago) |
|
| 2011-10-14 12:16:28 |
Ubuntu Foundations Team Bug Bot |
tags |
apport-bug i386 oneiric running-unity |
apport-bug i386 oneiric patch running-unity |
|
| 2011-10-14 12:16:29 |
Ubuntu Foundations Team Bug Bot |
bug |
|
|
added subscriber Ubuntu Review Team |
| 2011-10-14 16:02:21 |
Launchpad Janitor |
krb5 (Ubuntu): status |
New |
Confirmed |
|
| 2011-10-14 17:30:40 |
Sam Hartman |
bug watch added |
|
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=631106 |
|
| 2011-10-14 17:30:40 |
Sam Hartman |
bug task added |
|
krb5 (Debian) |
|
| 2011-10-14 17:51:45 |
Steve Langasek |
krb5 (Ubuntu): status |
Confirmed |
Triaged |
|
| 2011-10-14 17:51:48 |
Steve Langasek |
krb5 (Ubuntu): importance |
Undecided |
High |
|
| 2011-10-14 17:51:53 |
Steve Langasek |
nominated for series |
|
Ubuntu Oneiric |
|
| 2011-10-14 17:51:53 |
Steve Langasek |
bug task added |
|
krb5 (Ubuntu Oneiric) |
|
| 2011-10-14 17:51:53 |
Steve Langasek |
nominated for series |
|
Ubuntu Precise |
|
| 2011-10-14 17:51:53 |
Steve Langasek |
bug task added |
|
krb5 (Ubuntu Precise) |
|
| 2011-10-14 17:52:01 |
Steve Langasek |
krb5 (Ubuntu Oneiric): status |
New |
Triaged |
|
| 2011-10-14 17:52:04 |
Steve Langasek |
krb5 (Ubuntu Oneiric): importance |
Undecided |
High |
|
| 2011-10-14 18:34:24 |
chenel |
bug |
|
|
added subscriber Jeremy Wolcott |
| 2011-10-14 18:36:54 |
Bug Watch Updater |
krb5 (Debian): status |
Unknown |
Fix Released |
|
| 2011-10-14 22:06:12 |
Steve Langasek |
krb5 (Ubuntu Oneiric): status |
Triaged |
In Progress |
|
| 2011-10-14 22:06:15 |
Steve Langasek |
krb5 (Ubuntu Oneiric): assignee |
|
Steve Langasek (vorlon) |
|
| 2011-10-14 22:07:16 |
Steve Langasek |
description |
See RedHat bugzilla: https://bugzilla.redhat.com/show_bug.cgi?id=713518.
Quoting:
Certain versions of the KDC software (included for example
in Red Hat Enterprise Linux 2.1 and 3) reject requests,
which include KDC options the software does not recognize,
and do not support the "canonicalize" option. When a client
was configured to use one of these versions of the KDC
software, the client failed to obtain credentials for
authentication to other services. This interoperability
regression was introduced in the update to Red Hat
Enterprise Linux 6.1. With this update, an upstream patch
has been provided to fix this bug.
I have applied the patch provided on this bugzilla page, and this fixed the problem.
ProblemType: Bug
DistroRelease: Ubuntu 11.10
Package: libkrb5-3 1.9.1+dfsg-1ubuntu1
ProcVersionSignature: Ubuntu 3.0.0-12.20-generic-pae 3.0.4
Uname: Linux 3.0.0-12-generic-pae i686
NonfreeKernelModules: nvidia
ApportVersion: 1.23-0ubuntu3
Architecture: i386
Date: Fri Oct 14 15:56:20 2011
InstallationMedia: Ubuntu 11.04 "Natty Narwhal" - Release i386 (20110427.1)
SourcePackage: krb5
UpgradeStatus: Upgraded to oneiric on 2011-10-13 (0 days ago) |
SRU justification:
krb5 1.9.1 breaks interoperability with older KDCs. If you have a Kerberos realm with one of these older KDCs that does not implement the "canonicalize" option, oneiric's will be unusable as a Kerberos client for this realm.
See RedHat bugzilla: https://bugzilla.redhat.com/show_bug.cgi?id=713518.
Quoting:
Certain versions of the KDC software (included for example
in Red Hat Enterprise Linux 2.1 and 3) reject requests,
which include KDC options the software does not recognize,
and do not support the "canonicalize" option. When a client
was configured to use one of these versions of the KDC
software, the client failed to obtain credentials for
authentication to other services. This interoperability
regression was introduced in the update to Red Hat
Enterprise Linux 6.1. With this update, an upstream patch
has been provided to fix this bug.
I have applied the patch provided on this bugzilla page, and this fixed the problem.
ProblemType: Bug
DistroRelease: Ubuntu 11.10
Package: libkrb5-3 1.9.1+dfsg-1ubuntu1
ProcVersionSignature: Ubuntu 3.0.0-12.20-generic-pae 3.0.4
Uname: Linux 3.0.0-12-generic-pae i686
NonfreeKernelModules: nvidia
ApportVersion: 1.23-0ubuntu3
Architecture: i386
Date: Fri Oct 14 15:56:20 2011
InstallationMedia: Ubuntu 11.04 "Natty Narwhal" - Release i386 (20110427.1)
SourcePackage: krb5
UpgradeStatus: Upgraded to oneiric on 2011-10-13 (0 days ago) |
|
| 2011-10-14 22:07:25 |
Steve Langasek |
bug |
|
|
added subscriber Ubuntu Stable Release Updates Team |
| 2011-10-17 20:26:38 |
PatRiehecky |
bug |
|
|
added subscriber PatRiehecky |
| 2011-10-18 05:08:16 |
Martin Pitt |
krb5 (Ubuntu Oneiric): status |
In Progress |
Fix Committed |
|
| 2011-10-18 05:08:20 |
Martin Pitt |
bug |
|
|
added subscriber SRU Verification |
| 2011-10-18 05:08:23 |
Martin Pitt |
tags |
apport-bug i386 oneiric patch running-unity |
apport-bug i386 oneiric patch running-unity verification-needed |
|
| 2011-10-18 08:01:08 |
Steve Langasek |
tags |
apport-bug i386 oneiric patch running-unity verification-needed |
apport-bug i386 oneiric patch running-unity verification-done |
|
| 2011-10-18 21:29:11 |
Paul Tader |
bug |
|
|
added subscriber Paul Tader |
| 2011-10-19 01:53:42 |
Steve Beattie |
attachment added |
|
krb5_1.9.1+dfsg-1ubuntu2.1.debdiff https://bugs.launchpad.net/ubuntu/+source/krb5/+bug/874130/+attachment/2559171/+files/krb5_1.9.1%2Bdfsg-1ubuntu2.1.debdiff |
|
| 2011-10-19 02:54:01 |
Steve Beattie |
bug |
|
|
added subscriber Steve Beattie |
| 2011-10-19 04:02:55 |
Steve Langasek |
krb5 (Ubuntu Oneiric): status |
Fix Committed |
In Progress |
|
| 2011-10-19 04:44:05 |
Martin Pitt |
krb5 (Ubuntu Oneiric): status |
In Progress |
Fix Committed |
|
| 2011-10-19 04:44:09 |
Martin Pitt |
tags |
apport-bug i386 oneiric patch running-unity verification-done |
apport-bug i386 oneiric patch running-unity |
|
| 2011-10-19 04:44:10 |
Martin Pitt |
tags |
apport-bug i386 oneiric patch running-unity |
apport-bug i386 oneiric patch running-unity verification-needed |
|
| 2011-10-19 14:30:00 |
Steve Langasek |
tags |
apport-bug i386 oneiric patch running-unity verification-needed |
apport-bug i386 oneiric patch running-unity verification-done |
|
| 2011-10-20 12:13:59 |
Launchpad Janitor |
branch linked |
|
lp:ubuntu/oneiric-proposed/krb5 |
|
| 2011-10-21 00:53:35 |
Launchpad Janitor |
krb5 (Ubuntu Precise): status |
Triaged |
Fix Released |
|
| 2011-10-27 01:23:06 |
Launchpad Janitor |
krb5 (Ubuntu Oneiric): status |
Fix Committed |
Fix Released |
|
