Bug#376803: marked as done (kdesktop: kdesktop_lock fails to renew Kerberos tickets with pam_krb5)
Your message dated Fri, 19 Jan 2007 02:17:09 +0000
with message-id <E1H7jJV-00087z-Pu@ries.debian.org>
and subject line Bug#376803: fixed in kdebase 4:3.5.6.dfsg.1-1
has caused the attached Bug report to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what I am
talking about this indicates a serious mail system misconfiguration
somewhere. Please contact me immediately.)
Debian bug tracking system administrator
(administrator, Debian Bugs database)
--- Begin Message ---
- To: Debian Bug Tracking System <submit@bugs.debian.org>
- Subject: kdesktop: kdesktop_lock fails to renew Kerberos tickets with pam_krb5
- From: marcus@better.se
- Date: Wed, 5 Jul 2006 08:42:00 +0200
- Message-id: <200607050642.k656g0jW019221@kakmonster.int.dactylis.com>
Package: kdesktop
Version: 4:3.5.3-2
Severity: normal
I'm using pam_krb5 with a Heimdal KDC to authenticate logins. When I
log in with KDM, it fetches a ticket for the user. But after the
session is locked and then unlocked, the ticket is not renewed.
When unlocking the session I can see the following in the KDC log:
2006-06-19T08:59:50 AS-REQ marcus@EXAMPLE.COM from IPv4:192.168.100.4 for krbtgt/EXAMPLE.COM@EXAMPLE.COM
2006-06-19T08:59:50 Using aes256-cts-hmac-sha1-96/aes256-cts-hmac-sha1-96
2006-06-19T08:59:50 Requested flags: renewable_ok, forwardable
2006-06-19T08:59:50 sending 629 bytes to IPv4:192.168.100.4
Here is my pam setup:
# /etc/pam.d/common-auth - authentication settings common to all services
auth sufficient pam_krb5.so ignore_root forwardable
auth required pam_unix.so try_first_pass nullok_secure
# /etc/pam.d/common-account - authorization settings common to all services
account required pam_krb5.so ignore_root
account required pam_unix.so
# /etc/pam.d/common-session - session-related modules common to all services
session optional pam_krb5.so ignore_root
session required pam_unix.so
session optional pam_umask.so umask=002
# /etc/pam.d/kscreensaver - specify the PAM behaviour of kscreensaver
@include common-auth
@include common-account
@include common-password
@include common-session
# /etc/pam.d/kcheckpass - specify the PAM behaviour of kcheckpass
@include common-auth
@include common-account
@include common-password
@include common-session
# /etc/pam.d/other - specify the PAM fallback behaviour
@include common-auth
@include common-account
@include common-password
@include common-session
libpam-krb5 is version 1.2.0-3.
Versions of packages libpam-krb5 depends on:
ii krb5-config 1.8 Configuration files for Kerberos V
ii libc6 2.3.6-13 GNU C Library: Shared libraries
ii libcomerr2 1.39-1 common error description library
ii libkrb53 1.4.3-7 MIT Kerberos runtime libraries
ii libpam0g 0.79-3.1 Pluggable Authentication Modules l
-- System Information:
Debian Release: testing/unstable
APT prefers testing
APT policy: (990, 'testing'), (500, 'unstable'), (500, 'stable'), (1, 'experimental')
Architecture: i386 (i686)
Shell: /bin/sh linked to /bin/bash
Kernel: Linux 2.6.15-1-686
Locale: LANG=sv_SE.UTF-8, LC_CTYPE=sv_SE.UTF-8 (charmap=UTF-8)
Versions of packages kdesktop depends on:
ii kdebase-bin 4:3.5.3-2 core binaries for the KDE base mod
ii kdelibs4c2a 4:3.5.3-1 core libraries and binaries for al
ii libart-2.0-2 2.3.17-1 Library of functions for 2D graphi
ii libaudio2 1.7-9 The Network Audio System (NAS). (s
ii libc6 2.3.6-13 GNU C Library: Shared libraries
ii libfontconfig1 2.3.2-5.1 generic font configuration library
ii libfreetype6 2.2.1-2 FreeType 2 font engine, shared lib
ii libgcc1 1:4.1.0-4 GCC support library
ii libgl1-mesa-glx [libgl1] 6.4.2-1 A free implementation of the OpenG
ii libglu1-mesa [libglu1] 6.4.2-1 The OpenGL utility library (GLU)
ii libice6 1:1.0.0-3 X11 Inter-Client Exchange library
ii libidn11 0.5.18-2 GNU libidn library, implementation
ii libjpeg62 6b-13 The Independent JPEG Group's JPEG
ii libkonq4 4:3.5.3-2 core libraries for Konqueror
ii libpng12-0 1.2.8rel-5.1 PNG library - runtime
ii libqt3-mt 3:3.3.6-2 Qt GUI Library (Threaded runtime v
ii libsm6 1:1.0.0-4 X11 Session Management library
ii libstdc++6 4.1.0-4 The GNU Standard C++ Library v3
ii libx11-6 2:1.0.0-6 X11 client-side library
ii libxau6 1:1.0.0-3 X11 authorisation library
ii libxcursor1 1.1.5.2-5 X cursor management library
ii libxext6 1:1.0.0-4 X11 miscellaneous extension librar
ii libxft2 2.1.8.2-8 FreeType-based font drawing librar
ii libxi6 1:1.0.0-5 X11 Input extension library
ii libxinerama1 1:1.0.1-4 X11 Xinerama extension library
ii libxrandr2 2:1.1.0.2-4 X11 RandR extension library
ii libxrender1 1:0.9.0.2-4 X Rendering Extension client libra
ii libxss1 1:1.0.1-4 X11 Screen Saver extension library
ii libxt6 1:1.0.0-5 X11 toolkit intrinsics library
ii libxxf86misc1 1:1.0.0-4 X11 XFree86 miscellaneous extensio
ii zlib1g 1:1.2.3-11 compression library - runtime
Versions of packages kdesktop recommends:
ii eject 2.1.4-1 ejects CDs and operates CD-Changer
-- no debconf information
--- End Message ---
--- Begin Message ---
Source: kdebase
Source-Version: 4:3.5.6.dfsg.1-1
We believe that the bug you reported is fixed in the latest version of
kdebase, which is due to be installed in the Debian FTP archive:
kappfinder_3.5.6.dfsg.1-1_i386.deb
to pool/main/k/kdebase/kappfinder_3.5.6.dfsg.1-1_i386.deb
kate_3.5.6.dfsg.1-1_i386.deb
to pool/main/k/kdebase/kate_3.5.6.dfsg.1-1_i386.deb
kcontrol_3.5.6.dfsg.1-1_i386.deb
to pool/main/k/kdebase/kcontrol_3.5.6.dfsg.1-1_i386.deb
kdebase-bin_3.5.6.dfsg.1-1_i386.deb
to pool/main/k/kdebase/kdebase-bin_3.5.6.dfsg.1-1_i386.deb
kdebase-data_3.5.6.dfsg.1-1_all.deb
to pool/main/k/kdebase/kdebase-data_3.5.6.dfsg.1-1_all.deb
kdebase-dbg_3.5.6.dfsg.1-1_i386.deb
to pool/main/k/kdebase/kdebase-dbg_3.5.6.dfsg.1-1_i386.deb
kdebase-dev_3.5.6.dfsg.1-1_i386.deb
to pool/main/k/kdebase/kdebase-dev_3.5.6.dfsg.1-1_i386.deb
kdebase-doc-html_3.5.6.dfsg.1-1_all.deb
to pool/main/k/kdebase/kdebase-doc-html_3.5.6.dfsg.1-1_all.deb
kdebase-doc_3.5.6.dfsg.1-1_all.deb
to pool/main/k/kdebase/kdebase-doc_3.5.6.dfsg.1-1_all.deb
kdebase-kio-plugins_3.5.6.dfsg.1-1_i386.deb
to pool/main/k/kdebase/kdebase-kio-plugins_3.5.6.dfsg.1-1_i386.deb
kdebase_3.5.6.dfsg.1-1.diff.gz
to pool/main/k/kdebase/kdebase_3.5.6.dfsg.1-1.diff.gz
kdebase_3.5.6.dfsg.1-1.dsc
to pool/main/k/kdebase/kdebase_3.5.6.dfsg.1-1.dsc
kdebase_3.5.6.dfsg.1-1_all.deb
to pool/main/k/kdebase/kdebase_3.5.6.dfsg.1-1_all.deb
kdebase_3.5.6.dfsg.1.orig.tar.gz
to pool/main/k/kdebase/kdebase_3.5.6.dfsg.1.orig.tar.gz
kdepasswd_3.5.6.dfsg.1-1_i386.deb
to pool/main/k/kdebase/kdepasswd_3.5.6.dfsg.1-1_i386.deb
kdeprint_3.5.6.dfsg.1-1_i386.deb
to pool/main/k/kdebase/kdeprint_3.5.6.dfsg.1-1_i386.deb
kdesktop_3.5.6.dfsg.1-1_i386.deb
to pool/main/k/kdebase/kdesktop_3.5.6.dfsg.1-1_i386.deb
kdm_3.5.6.dfsg.1-1_i386.deb
to pool/main/k/kdebase/kdm_3.5.6.dfsg.1-1_i386.deb
kfind_3.5.6.dfsg.1-1_i386.deb
to pool/main/k/kdebase/kfind_3.5.6.dfsg.1-1_i386.deb
khelpcenter_3.5.6.dfsg.1-1_i386.deb
to pool/main/k/kdebase/khelpcenter_3.5.6.dfsg.1-1_i386.deb
kicker_3.5.6.dfsg.1-1_i386.deb
to pool/main/k/kdebase/kicker_3.5.6.dfsg.1-1_i386.deb
klipper_3.5.6.dfsg.1-1_i386.deb
to pool/main/k/kdebase/klipper_3.5.6.dfsg.1-1_i386.deb
kmenuedit_3.5.6.dfsg.1-1_i386.deb
to pool/main/k/kdebase/kmenuedit_3.5.6.dfsg.1-1_i386.deb
konqueror-nsplugins_3.5.6.dfsg.1-1_i386.deb
to pool/main/k/kdebase/konqueror-nsplugins_3.5.6.dfsg.1-1_i386.deb
konqueror_3.5.6.dfsg.1-1_i386.deb
to pool/main/k/kdebase/konqueror_3.5.6.dfsg.1-1_i386.deb
konsole_3.5.6.dfsg.1-1_i386.deb
to pool/main/k/kdebase/konsole_3.5.6.dfsg.1-1_i386.deb
kpager_3.5.6.dfsg.1-1_i386.deb
to pool/main/k/kdebase/kpager_3.5.6.dfsg.1-1_i386.deb
kpersonalizer_3.5.6.dfsg.1-1_i386.deb
to pool/main/k/kdebase/kpersonalizer_3.5.6.dfsg.1-1_i386.deb
ksmserver_3.5.6.dfsg.1-1_i386.deb
to pool/main/k/kdebase/ksmserver_3.5.6.dfsg.1-1_i386.deb
ksplash_3.5.6.dfsg.1-1_i386.deb
to pool/main/k/kdebase/ksplash_3.5.6.dfsg.1-1_i386.deb
ksysguard_3.5.6.dfsg.1-1_i386.deb
to pool/main/k/kdebase/ksysguard_3.5.6.dfsg.1-1_i386.deb
ksysguardd_3.5.6.dfsg.1-1_i386.deb
to pool/main/k/kdebase/ksysguardd_3.5.6.dfsg.1-1_i386.deb
ktip_3.5.6.dfsg.1-1_i386.deb
to pool/main/k/kdebase/ktip_3.5.6.dfsg.1-1_i386.deb
kwin_3.5.6.dfsg.1-1_i386.deb
to pool/main/k/kdebase/kwin_3.5.6.dfsg.1-1_i386.deb
libkonq4-dev_3.5.6.dfsg.1-1_i386.deb
to pool/main/k/kdebase/libkonq4-dev_3.5.6.dfsg.1-1_i386.deb
libkonq4_3.5.6.dfsg.1-1_i386.deb
to pool/main/k/kdebase/libkonq4_3.5.6.dfsg.1-1_i386.deb
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to 376803@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Debian Qt/KDE Maintainers <debian-qt-kde@lists.debian.org> (supplier of updated kdebase package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@debian.org)
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Format: 1.7
Date: Tue, 16 Jan 2007 18:13:20 +0100
Source: kdebase
Binary: kdesktop kcontrol kpersonalizer kdm kdebase-doc-html kdebase-dbg klipper kappfinder kdebase-doc kdebase kmenuedit kicker libkonq4 konqueror-nsplugins kdebase-bin kdebase-dev ksplash kdeprint libkonq4-dev kwin kdepasswd ksmserver kfind kdebase-kio-plugins kpager khelpcenter kate ksysguard konqueror ktip ksysguardd kdebase-data konsole
Architecture: source i386 all
Version: 4:3.5.6.dfsg.1-1
Distribution: experimental
Urgency: low
Maintainer: Debian Qt/KDE Maintainers <debian-qt-kde@lists.debian.org>
Changed-By: Debian Qt/KDE Maintainers <debian-qt-kde@lists.debian.org>
Description:
kappfinder - non-KDE application finder for KDE
kate - advanced text editor for KDE
kcontrol - control center for KDE
kdebase - base components from the official KDE release
kdebase-bin - core binaries for the KDE base module
kdebase-data - shared data files for the KDE base module
kdebase-dbg - debugging symbols for kdebase
kdebase-dev - development files for the KDE base module
kdebase-doc - developer documentation for the KDE base module
kdebase-doc-html - KDE base documentation in HTML format
kdebase-kio-plugins - core I/O slaves for KDE
kdepasswd - password changer for KDE
kdeprint - print system for KDE
kdesktop - miscellaneous binaries and files for the KDE desktop
kdm - X display manager for KDE
kfind - file-find utility for KDE
khelpcenter - help center for KDE
kicker - desktop panel for KDE
klipper - clipboard utility for KDE
kmenuedit - menu editor for KDE
konqueror - KDE's advanced file manager, web browser and document viewer
konqueror-nsplugins - Netscape plugin support for Konqueror
konsole - X terminal emulator for KDE
kpager - desktop pager for KDE
kpersonalizer - installation personalizer for KDE
ksmserver - session manager for KDE
ksplash - the KDE splash screen
ksysguard - system guard for KDE
ksysguardd - system guard daemon for KDE
ktip - useful tips for KDE
kwin - the KDE window manager
libkonq4 - core libraries for Konqueror
libkonq4-dev - development files for Konqueror's core libraries
Closes: 242641 350561 374394 376803 405417
Changes:
kdebase (4:3.5.6.dfsg.1-1) experimental; urgency=low
.
* New upstream release:
* Fixes "kdm does not obey pam_limits". (Closes: #242641)
* Resolves ksysguard problem that it was not possible to sensor order.
(Closes: #350561)
* Fixes kdesktop_lock and pam_krb5. (Closes: #374394, #376803)
.
+++ Changes by Modestas Vainius:
.
* Update debian/*.install files.
* Resync debian/patches:
* Adapt to upstream changes - 18, 23.
* Remove, applied upstream - 02, 29, 30, 32, 33, 35, 36.
* Fix offsets - 14, 19, 20, 28.
* Update Uploaders.
.
+++ Changes by Sune Vuorela:
.
* Add norwegian (nb) translation of debconf questions. Thanks to
Bjorn Steensrud. (Closes: #405417)
Files:
05c1f5fa3db804e087e61ec820a14c85 2122 kde optional kdebase_3.5.6.dfsg.1-1.dsc
de6479c3427a341c36009e21a5e65160 28799896 kde optional kdebase_3.5.6.dfsg.1.orig.tar.gz
c2475afbc4a48b7e106e22ecc1710d0f 600435 kde optional kdebase_3.5.6.dfsg.1-1.diff.gz
14127633fa9bd0888dc5a2982b2f33c5 40834 kde optional kdebase_3.5.6.dfsg.1-1_all.deb
e7e08de7b221fd5816ed35135c0e7f45 9750026 kde optional kdebase-data_3.5.6.dfsg.1-1_all.deb
10cd7c6436293f69097ef3c341477fb9 1759280 doc optional kdebase-doc_3.5.6.dfsg.1-1_all.deb
c78e91cad2b929a1a8d0ca7d6ddd527f 379336 doc optional kdebase-doc-html_3.5.6.dfsg.1-1_all.deb
fa3774eeb45e9edbe23e3794141264a6 284290 kde optional kappfinder_3.5.6.dfsg.1-1_i386.deb
075fd88ede7b61abed907317d2fd2890 793228 editors optional kate_3.5.6.dfsg.1-1_i386.deb
ed08b328bcf6e5d9116d1a22ae167394 2954516 kde optional kcontrol_3.5.6.dfsg.1-1_i386.deb
2ab223f0dad8a355d11f269d592e8be7 1247684 kde optional kdebase-bin_3.5.6.dfsg.1-1_i386.deb
57fc169844cd208eb79c00cad6a429ae 79516 devel optional kdebase-dev_3.5.6.dfsg.1-1_i386.deb
a33e9a5e834c59f43f0a09fcba711f80 1109776 kde optional kdebase-kio-plugins_3.5.6.dfsg.1-1_i386.deb
1ee9119e650d214ad0fae7d4abdb3cf5 242938 utils optional kdepasswd_3.5.6.dfsg.1-1_i386.deb
3689b425cfa84b6dd75dfee93a26c705 1469276 utils optional kdeprint_3.5.6.dfsg.1-1_i386.deb
21d87b771f56aa485813495ac8fdaa5e 779908 kde optional kdesktop_3.5.6.dfsg.1-1_i386.deb
80de255a11d7b6712bf77e46418f908b 636088 kde optional kdm_3.5.6.dfsg.1-1_i386.deb
5db6e6addf050a08bd8c243381b6fe85 203576 utils optional kfind_3.5.6.dfsg.1-1_i386.deb
5ccd75a06f2eff90d919bcc341c39dd9 2295978 kde optional khelpcenter_3.5.6.dfsg.1-1_i386.deb
7288a12aed3815f1dd8cd829f8b12389 2005784 kde optional kicker_3.5.6.dfsg.1-1_i386.deb
f0f0d3c7c10f88410ad37ebeae8ecd6d 273758 kde optional klipper_3.5.6.dfsg.1-1_i386.deb
fadabed428c960725e98017669130ea0 379876 kde optional kmenuedit_3.5.6.dfsg.1-1_i386.deb
f28c77ed8b7ba78045b9ed532ad829dc 2017374 web optional konqueror_3.5.6.dfsg.1-1_i386.deb
a0de369914ac6dfb6a9078a8f7895365 143912 utils optional konqueror-nsplugins_3.5.6.dfsg.1-1_i386.deb
4beccf924d22b22ea8aa6b069635a4da 730706 kde optional konsole_3.5.6.dfsg.1-1_i386.deb
78dc253b678f89234838f142ecf1b980 116616 kde optional kpager_3.5.6.dfsg.1-1_i386.deb
a8408e67e730e4f19b5fbe9260323304 493870 kde optional kpersonalizer_3.5.6.dfsg.1-1_i386.deb
1fdcef56ab9455025bceaa6128de9aeb 165482 kde optional ksmserver_3.5.6.dfsg.1-1_i386.deb
449438756b1297be8037c141d412f470 710866 kde optional ksplash_3.5.6.dfsg.1-1_i386.deb
f61b5186aef4728e607294aecaef869d 508568 utils optional ksysguard_3.5.6.dfsg.1-1_i386.deb
52e3eb175d88ab17e6e16e4143bfb0de 70136 utils optional ksysguardd_3.5.6.dfsg.1-1_i386.deb
511a3f21c6963d99e1955fae3999d061 106848 kde optional ktip_3.5.6.dfsg.1-1_i386.deb
ab540c9cf566d3901429f184c2902afe 1032666 kde optional kwin_3.5.6.dfsg.1-1_i386.deb
035258b7c5fd8c22ad03a8441718b28d 269864 libs optional libkonq4_3.5.6.dfsg.1-1_i386.deb
95e686ea1c5f9e937ad081c215dce6f8 66034 libdevel optional libkonq4-dev_3.5.6.dfsg.1-1_i386.deb
def7f2415c6205e7aeaf9c99b4a1f6a9 33108116 libdevel extra kdebase-dbg_3.5.6.dfsg.1-1_i386.deb
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (GNU/Linux)
Comment: Signed by Ana Guerrero
iD8DBQFFrhvSn3j4POjENGERAuzWAJ9lDybthrEm9LqK7TZB0N9WptIdtACeNKmw
z4losBSfi2D2BoqAqStQyFA=
=WlaM
-----END PGP SIGNATURE-----
--- End Message ---
Reply to: