HI Roman, On Mi 07 Feb 2024 12:51:11 CET, roman.meier wrote:
Hi folks, Yesterday, I came across the following entry in /var/log/auth.log:Feb 6 11:03:38 tjener su: pam_krb5(su:auth): (user roman) credential verification failed: Cannot find key for host/tjener.intern@INTERN kvno 16 in keytabI also had a closer look at the following script: /usr/share/debian-edu-config/tools/copy-host-keytab This then lead me to the solution of my authentication problem.My file /etc/krb5.keytab was missing many entries preventing successful user logins. Executing the script fixed this finally.Kind regards, Roman
If you run an old version of TJENER, you might be facing this bug: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1002014Please adjust your gosa-modify-host script in /usr/share/debian-edu-config/tools/ as shown here:
https://salsa.debian.org/debian-edu/debian-edu-config/-/commit/57d70cb10a902a004ed39da902b6808c36ce1851 Mike -- DAS-NETZWERKTEAM c\o Technik- und Ökologiezentrum Eckernförde Mike Gabriel, Marienthaler Str. 17, 24340 Eckernförde mobile: +49 (1520) 1976 148 landline: +49 (4351) 850 8940 GnuPG Fingerprint: 9BFB AEE8 6C0A A5FF BF22 0782 9AF4 6B30 2577 1B31 mail: mike.gabriel@das-netzwerkteam.de, http://das-netzwerkteam.de
Attachment:
pgpqGC62iKoKm.pgp
Description: Digitale PGP-Signatur