[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#374394: marked as done (kdesktop: kdesktop_lock fails to renew Kerberos tickets with pam_krb5)

Your message dated Fri, 19 Jan 2007 02:17:09 +0000
with message-id <E1H7jJV-00087z-Pu@ries.debian.org>
and subject line Bug#376803: fixed in kdebase 4:3.5.6.dfsg.1-1
has caused the attached Bug report to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what I am
talking about this indicates a serious mail system misconfiguration
somewhere.  Please contact me immediately.)

Debian bug tracking system administrator
(administrator, Debian Bugs database)

--- Begin Message ---
Package: kdesktop
Version: 4:3.5.3-2
Severity: normal

I'm using pam_krb5 with a Heimdal KDC to authenticate logins. When I
log in with KDM, it fetches a ticket for the user. But after the
session is locked and then unlocked, the ticket is not renewed.

When unlocking the session I can see the following in the KDC log:

2006-06-19T08:59:50 AS-REQ marcus@EXAMPLE.COM from IPv4: for krbtgt/EXAMPLE.COM@EXAMPLE.COM
2006-06-19T08:59:50 Using aes256-cts-hmac-sha1-96/aes256-cts-hmac-sha1-96
2006-06-19T08:59:50 Requested flags: renewable_ok, forwardable
2006-06-19T08:59:50 sending 629 bytes to IPv4:

Here is my pam setup:

# /etc/pam.d/common-auth - authentication settings common to all services
auth  sufficient  pam_krb5.so ignore_root forwardable
auth  required    pam_unix.so try_first_pass nullok_secure

# /etc/pam.d/common-account - authorization settings common to all services
account  required    pam_krb5.so ignore_root
account  required    pam_unix.so

# /etc/pam.d/common-session - session-related modules common to all services
session  optional  pam_krb5.so ignore_root
session  required  pam_unix.so
session  optional  pam_umask.so umask=002

# /etc/pam.d/kscreensaver - specify the PAM behaviour of kscreensaver
@include common-auth
@include common-account
@include common-password
@include common-session

# /etc/pam.d/kcheckpass - specify the PAM behaviour of kcheckpass
@include common-auth
@include common-account
@include common-password
@include common-session

# /etc/pam.d/other - specify the PAM fallback behaviour
@include common-auth
@include common-account
@include common-password
@include common-session

libpam-krb5 is version 1.2.0-3. 

Versions of packages libpam-krb5 depends on:
ii  krb5-config                   1.8        Configuration files for Kerberos V
ii  libc6                         2.3.6-13   GNU C Library: Shared libraries
ii  libcomerr2                    1.39-1     common error description library
ii  libkrb53                      1.4.3-7    MIT Kerberos runtime libraries
ii  libpam0g                      0.79-3.1   Pluggable Authentication Modules l

-- System Information:
Debian Release: testing/unstable
  APT prefers testing
  APT policy: (990, 'testing'), (500, 'unstable'), (500, 'stable'), (1, 'experimental')
Architecture: i386 (i686)
Shell:  /bin/sh linked to /bin/bash
Kernel: Linux 2.6.15-1-686
Locale: LANG=sv_SE.UTF-8, LC_CTYPE=sv_SE.UTF-8 (charmap=UTF-8)

Versions of packages kdesktop depends on:
ii  kdebase-bin                 4:3.5.3-2    core binaries for the KDE base mod
ii  kdelibs4c2a                 4:3.5.3-1    core libraries and binaries for al
ii  libart-2.0-2                2.3.17-1     Library of functions for 2D graphi
ii  libaudio2                   1.7-9        The Network Audio System (NAS). (s
ii  libc6                       2.3.6-13     GNU C Library: Shared libraries
ii  libfontconfig1              2.3.2-5.1    generic font configuration library
ii  libfreetype6                2.2.1-2      FreeType 2 font engine, shared lib
ii  libgcc1                     1:4.1.0-4    GCC support library
ii  libgl1-mesa-glx [libgl1]    6.4.2-1      A free implementation of the OpenG
ii  libglu1-mesa [libglu1]      6.4.2-1      The OpenGL utility library (GLU)
ii  libice6                     1:1.0.0-3    X11 Inter-Client Exchange library
ii  libidn11                    0.5.18-2     GNU libidn library, implementation
ii  libjpeg62                   6b-13        The Independent JPEG Group's JPEG 
ii  libkonq4                    4:3.5.3-2    core libraries for Konqueror
ii  libpng12-0                  1.2.8rel-5.1 PNG library - runtime
ii  libqt3-mt                   3:3.3.6-2    Qt GUI Library (Threaded runtime v
ii  libsm6                      1:1.0.0-4    X11 Session Management library
ii  libstdc++6                  4.1.0-4      The GNU Standard C++ Library v3
ii  libx11-6                    2:1.0.0-6    X11 client-side library
ii  libxau6                     1:1.0.0-3    X11 authorisation library
ii  libxcursor1           X cursor management library
ii  libxext6                    1:1.0.0-4    X11 miscellaneous extension librar
ii  libxft2               FreeType-based font drawing librar
ii  libxi6                      1:1.0.0-5    X11 Input extension library
ii  libxinerama1                1:1.0.1-4    X11 Xinerama extension library
ii  libxrandr2                  2:  X11 RandR extension library
ii  libxrender1                 1:  X Rendering Extension client libra
ii  libxss1                     1:1.0.1-4    X11 Screen Saver extension library
ii  libxt6                      1:1.0.0-5    X11 toolkit intrinsics library
ii  libxxf86misc1               1:1.0.0-4    X11 XFree86 miscellaneous extensio
ii  zlib1g                      1:1.2.3-11   compression library - runtime

Versions of packages kdesktop recommends:
ii  eject                         2.1.4-1    ejects CDs and operates CD-Changer

-- no debconf information

--- End Message ---
--- Begin Message ---
Source: kdebase
Source-Version: 4:3.5.6.dfsg.1-1

We believe that the bug you reported is fixed in the latest version of
kdebase, which is due to be installed in the Debian FTP archive:

  to pool/main/k/kdebase/kappfinder_3.5.6.dfsg.1-1_i386.deb
  to pool/main/k/kdebase/kate_3.5.6.dfsg.1-1_i386.deb
  to pool/main/k/kdebase/kcontrol_3.5.6.dfsg.1-1_i386.deb
  to pool/main/k/kdebase/kdebase-bin_3.5.6.dfsg.1-1_i386.deb
  to pool/main/k/kdebase/kdebase-data_3.5.6.dfsg.1-1_all.deb
  to pool/main/k/kdebase/kdebase-dbg_3.5.6.dfsg.1-1_i386.deb
  to pool/main/k/kdebase/kdebase-dev_3.5.6.dfsg.1-1_i386.deb
  to pool/main/k/kdebase/kdebase-doc-html_3.5.6.dfsg.1-1_all.deb
  to pool/main/k/kdebase/kdebase-doc_3.5.6.dfsg.1-1_all.deb
  to pool/main/k/kdebase/kdebase-kio-plugins_3.5.6.dfsg.1-1_i386.deb
  to pool/main/k/kdebase/kdebase_3.5.6.dfsg.1-1.diff.gz
  to pool/main/k/kdebase/kdebase_3.5.6.dfsg.1-1.dsc
  to pool/main/k/kdebase/kdebase_3.5.6.dfsg.1-1_all.deb
  to pool/main/k/kdebase/kdebase_3.5.6.dfsg.1.orig.tar.gz
  to pool/main/k/kdebase/kdepasswd_3.5.6.dfsg.1-1_i386.deb
  to pool/main/k/kdebase/kdeprint_3.5.6.dfsg.1-1_i386.deb
  to pool/main/k/kdebase/kdesktop_3.5.6.dfsg.1-1_i386.deb
  to pool/main/k/kdebase/kdm_3.5.6.dfsg.1-1_i386.deb
  to pool/main/k/kdebase/kfind_3.5.6.dfsg.1-1_i386.deb
  to pool/main/k/kdebase/khelpcenter_3.5.6.dfsg.1-1_i386.deb
  to pool/main/k/kdebase/kicker_3.5.6.dfsg.1-1_i386.deb
  to pool/main/k/kdebase/klipper_3.5.6.dfsg.1-1_i386.deb
  to pool/main/k/kdebase/kmenuedit_3.5.6.dfsg.1-1_i386.deb
  to pool/main/k/kdebase/konqueror-nsplugins_3.5.6.dfsg.1-1_i386.deb
  to pool/main/k/kdebase/konqueror_3.5.6.dfsg.1-1_i386.deb
  to pool/main/k/kdebase/konsole_3.5.6.dfsg.1-1_i386.deb
  to pool/main/k/kdebase/kpager_3.5.6.dfsg.1-1_i386.deb
  to pool/main/k/kdebase/kpersonalizer_3.5.6.dfsg.1-1_i386.deb
  to pool/main/k/kdebase/ksmserver_3.5.6.dfsg.1-1_i386.deb
  to pool/main/k/kdebase/ksplash_3.5.6.dfsg.1-1_i386.deb
  to pool/main/k/kdebase/ksysguard_3.5.6.dfsg.1-1_i386.deb
  to pool/main/k/kdebase/ksysguardd_3.5.6.dfsg.1-1_i386.deb
  to pool/main/k/kdebase/ktip_3.5.6.dfsg.1-1_i386.deb
  to pool/main/k/kdebase/kwin_3.5.6.dfsg.1-1_i386.deb
  to pool/main/k/kdebase/libkonq4-dev_3.5.6.dfsg.1-1_i386.deb
  to pool/main/k/kdebase/libkonq4_3.5.6.dfsg.1-1_i386.deb

A summary of the changes between this version and the previous one is

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 376803@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
Debian Qt/KDE Maintainers <debian-qt-kde@lists.debian.org> (supplier of updated kdebase package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@debian.org)

Hash: SHA1

Format: 1.7
Date: Tue, 16 Jan 2007 18:13:20 +0100
Source: kdebase
Binary: kdesktop kcontrol kpersonalizer kdm kdebase-doc-html kdebase-dbg klipper kappfinder kdebase-doc kdebase kmenuedit kicker libkonq4 konqueror-nsplugins kdebase-bin kdebase-dev ksplash kdeprint libkonq4-dev kwin kdepasswd ksmserver kfind kdebase-kio-plugins kpager khelpcenter kate ksysguard konqueror ktip ksysguardd kdebase-data konsole
Architecture: source i386 all
Version: 4:3.5.6.dfsg.1-1
Distribution: experimental
Urgency: low
Maintainer: Debian Qt/KDE Maintainers <debian-qt-kde@lists.debian.org>
Changed-By: Debian Qt/KDE Maintainers <debian-qt-kde@lists.debian.org>
 kappfinder - non-KDE application finder for KDE
 kate       - advanced text editor for KDE
 kcontrol   - control center for KDE
 kdebase    - base components from the official KDE release
 kdebase-bin - core binaries for the KDE base module
 kdebase-data - shared data files for the KDE base module
 kdebase-dbg - debugging symbols for kdebase
 kdebase-dev - development files for the KDE base module
 kdebase-doc - developer documentation for the KDE base module
 kdebase-doc-html - KDE base documentation in HTML format
 kdebase-kio-plugins - core I/O slaves for KDE
 kdepasswd  - password changer for KDE
 kdeprint   - print system for KDE
 kdesktop   - miscellaneous binaries and files for the KDE desktop
 kdm        - X display manager for KDE
 kfind      - file-find utility for KDE
 khelpcenter - help center for KDE
 kicker     - desktop panel for KDE
 klipper    - clipboard utility for KDE
 kmenuedit  - menu editor for KDE
 konqueror  - KDE's advanced file manager, web browser and document viewer
 konqueror-nsplugins - Netscape plugin support for Konqueror
 konsole    - X terminal emulator for KDE
 kpager     - desktop pager for KDE
 kpersonalizer - installation personalizer for KDE
 ksmserver  - session manager for KDE
 ksplash    - the KDE splash screen
 ksysguard  - system guard for KDE
 ksysguardd - system guard daemon for KDE
 ktip       - useful tips for KDE
 kwin       - the KDE window manager
 libkonq4   - core libraries for Konqueror
 libkonq4-dev - development files for Konqueror's core libraries
Closes: 242641 350561 374394 376803 405417
 kdebase (4:3.5.6.dfsg.1-1) experimental; urgency=low
   * New upstream release:
     * Fixes "kdm does not obey pam_limits". (Closes: #242641)
     * Resolves ksysguard problem that it was not possible to sensor order.
       (Closes: #350561)
     * Fixes kdesktop_lock and pam_krb5. (Closes: #374394, #376803)
   +++ Changes by Modestas Vainius:
   * Update debian/*.install files.
   * Resync debian/patches:
     * Adapt to upstream changes - 18, 23.
     * Remove, applied upstream - 02, 29, 30, 32, 33, 35, 36.
     * Fix offsets - 14, 19, 20, 28.
   * Update Uploaders.
   +++ Changes by Sune Vuorela:
   * Add norwegian (nb) translation of debconf questions. Thanks to
     Bjorn Steensrud. (Closes: #405417)
 05c1f5fa3db804e087e61ec820a14c85 2122 kde optional kdebase_3.5.6.dfsg.1-1.dsc
 de6479c3427a341c36009e21a5e65160 28799896 kde optional kdebase_3.5.6.dfsg.1.orig.tar.gz
 c2475afbc4a48b7e106e22ecc1710d0f 600435 kde optional kdebase_3.5.6.dfsg.1-1.diff.gz
 14127633fa9bd0888dc5a2982b2f33c5 40834 kde optional kdebase_3.5.6.dfsg.1-1_all.deb
 e7e08de7b221fd5816ed35135c0e7f45 9750026 kde optional kdebase-data_3.5.6.dfsg.1-1_all.deb
 10cd7c6436293f69097ef3c341477fb9 1759280 doc optional kdebase-doc_3.5.6.dfsg.1-1_all.deb
 c78e91cad2b929a1a8d0ca7d6ddd527f 379336 doc optional kdebase-doc-html_3.5.6.dfsg.1-1_all.deb
 fa3774eeb45e9edbe23e3794141264a6 284290 kde optional kappfinder_3.5.6.dfsg.1-1_i386.deb
 075fd88ede7b61abed907317d2fd2890 793228 editors optional kate_3.5.6.dfsg.1-1_i386.deb
 ed08b328bcf6e5d9116d1a22ae167394 2954516 kde optional kcontrol_3.5.6.dfsg.1-1_i386.deb
 2ab223f0dad8a355d11f269d592e8be7 1247684 kde optional kdebase-bin_3.5.6.dfsg.1-1_i386.deb
 57fc169844cd208eb79c00cad6a429ae 79516 devel optional kdebase-dev_3.5.6.dfsg.1-1_i386.deb
 a33e9a5e834c59f43f0a09fcba711f80 1109776 kde optional kdebase-kio-plugins_3.5.6.dfsg.1-1_i386.deb
 1ee9119e650d214ad0fae7d4abdb3cf5 242938 utils optional kdepasswd_3.5.6.dfsg.1-1_i386.deb
 3689b425cfa84b6dd75dfee93a26c705 1469276 utils optional kdeprint_3.5.6.dfsg.1-1_i386.deb
 21d87b771f56aa485813495ac8fdaa5e 779908 kde optional kdesktop_3.5.6.dfsg.1-1_i386.deb
 80de255a11d7b6712bf77e46418f908b 636088 kde optional kdm_3.5.6.dfsg.1-1_i386.deb
 5db6e6addf050a08bd8c243381b6fe85 203576 utils optional kfind_3.5.6.dfsg.1-1_i386.deb
 5ccd75a06f2eff90d919bcc341c39dd9 2295978 kde optional khelpcenter_3.5.6.dfsg.1-1_i386.deb
 7288a12aed3815f1dd8cd829f8b12389 2005784 kde optional kicker_3.5.6.dfsg.1-1_i386.deb
 f0f0d3c7c10f88410ad37ebeae8ecd6d 273758 kde optional klipper_3.5.6.dfsg.1-1_i386.deb
 fadabed428c960725e98017669130ea0 379876 kde optional kmenuedit_3.5.6.dfsg.1-1_i386.deb
 f28c77ed8b7ba78045b9ed532ad829dc 2017374 web optional konqueror_3.5.6.dfsg.1-1_i386.deb
 a0de369914ac6dfb6a9078a8f7895365 143912 utils optional konqueror-nsplugins_3.5.6.dfsg.1-1_i386.deb
 4beccf924d22b22ea8aa6b069635a4da 730706 kde optional konsole_3.5.6.dfsg.1-1_i386.deb
 78dc253b678f89234838f142ecf1b980 116616 kde optional kpager_3.5.6.dfsg.1-1_i386.deb
 a8408e67e730e4f19b5fbe9260323304 493870 kde optional kpersonalizer_3.5.6.dfsg.1-1_i386.deb
 1fdcef56ab9455025bceaa6128de9aeb 165482 kde optional ksmserver_3.5.6.dfsg.1-1_i386.deb
 449438756b1297be8037c141d412f470 710866 kde optional ksplash_3.5.6.dfsg.1-1_i386.deb
 f61b5186aef4728e607294aecaef869d 508568 utils optional ksysguard_3.5.6.dfsg.1-1_i386.deb
 52e3eb175d88ab17e6e16e4143bfb0de 70136 utils optional ksysguardd_3.5.6.dfsg.1-1_i386.deb
 511a3f21c6963d99e1955fae3999d061 106848 kde optional ktip_3.5.6.dfsg.1-1_i386.deb
 ab540c9cf566d3901429f184c2902afe 1032666 kde optional kwin_3.5.6.dfsg.1-1_i386.deb
 035258b7c5fd8c22ad03a8441718b28d 269864 libs optional libkonq4_3.5.6.dfsg.1-1_i386.deb
 95e686ea1c5f9e937ad081c215dce6f8 66034 libdevel optional libkonq4-dev_3.5.6.dfsg.1-1_i386.deb
 def7f2415c6205e7aeaf9c99b4a1f6a9 33108116 libdevel extra kdebase-dbg_3.5.6.dfsg.1-1_i386.deb

Version: GnuPG v1.4.6 (GNU/Linux)
Comment: Signed by Ana Guerrero


--- End Message ---

Reply to: