--- Begin Message ---
- To: Debian Bug Tracking System <submit@bugs.debian.org>
- Subject: kdebase-bin: kcheckpass does not update Kerberos ticket cache
- From: "Alexandra N. Kossovsky" <sasha@oktetlabs.ru>
- Date: Wed, 16 Apr 2008 18:19:50 +0400
- Message-id: <20080416141950.GA7317@oktetlabs.ru>
Package: kdebase-bin
Version: 4:3.5.5a.dfsg.1-6etch2
Severity: normal
I'm using pam_krb5, and kcheckpass checks password using it. However,
additionally to checking passwords, pam_krb5 provides other useful
functionality: it stores the Kerberos ticket obtained from KDC in a file
pointed by environment variable KRB5CCNAME.
With all other screensavers/screenlockers, it works just fine:
- xdm/kdm/gdm obtains ticket and sets KRB5CCNAME to point to the ticket
cache;
- xscreensaver/gnome-screensaver/xlockmore obtains new ticket and
updates the content of $KRB5CCNAME, without changing path to the ticket
cache.
So, user with screenlocker usually should not care about obtaining new
tickets via kinit; all "just works". With KDE users who lock their
screen with Ctrl-Alt-L, password is checked correctly, but the ticket
cache is not updated.
Looking on ltrace of kcheckpass, I see that it creates its own ticket
cache file and destroys this file at the end. Also note, that it is not
a bug in pam_krb5, but in a way how kcheckpass uses PAM, because all
other screensavers work correctly.
I have not really looked in the source code, but I can do it; please,
ask any information I forget to provide to you.
libpam-krb5 is 2.6-1 from etch.
-- System Information:
Debian Release: 4.0
APT prefers stable
APT policy: (900, 'stable')
Architecture: amd64 (x86_64)
Shell: /bin/sh linked to /bin/bash
Kernel: Linux 2.6.18-6-amd64
Locale: LANG=, LC_CTYPE=ru_RU.UTF-8 (charmap=UTF-8)
Versions of packages kdebase-bin depends on:
ii kdelibs4c2a 4:3.5.5a.dfsg.1-8etch1 core libraries and binaries for al
ii libacl1 2.2.41-1 Access control list shared library
ii libart-2.0-2 2.3.17-1 Library of functions for 2D graphi
ii libattr1 2.4.32-1 Extended attribute shared library
ii libaudio2 1.8-4 The Network Audio System (NAS). (s
ii libc6 2.3.6.ds1-13etch5 GNU C Library: Shared libraries
ii libfontconfig1 2.4.2-1.2 generic font configuration library
ii libfreetype6 2.2.1-5+etch2 FreeType 2 font engine, shared lib
ii libgamin0 [libfam 0.1.8-2 Client library for the gamin file
ii libgcc1 1:4.1.1-21 GCC support library
ii libice6 1:1.0.1-2 X11 Inter-Client Exchange library
ii libidn11 0.6.5-1 GNU libidn library, implementation
ii libjpeg62 6b-13 The Independent JPEG Group's JPEG
ii libpam-runtime 0.79-5 Runtime support for the PAM librar
ii libpam0g 0.79-5 Pluggable Authentication Modules l
ii libpng12-0 1.2.15~beta5-1 PNG library - runtime
ii libqt3-mt 3:3.3.7-4etch1 Qt GUI Library (Threaded runtime v
ii libsm6 1:1.0.1-3 X11 Session Management library
ii libstdc++6 4.1.1-21 The GNU Standard C++ Library v3
ii libx11-6 2:1.0.3-7 X11 client-side library
ii libxcursor1 1.1.7-4 X cursor management library
ii libxext6 1:1.0.1-2 X11 miscellaneous extension librar
ii libxft2 2.1.8.2-8 FreeType-based font drawing librar
ii libxi6 1:1.0.1-4 X11 Input extension library
ii libxinerama1 1:1.0.1-4.1 X11 Xinerama extension library
ii libxkbfile1 1:1.0.3-2 X11 keyboard file manipulation lib
ii libxrandr2 2:1.1.0.2-5 X11 RandR extension library
ii libxrender1 1:0.9.1-3 X Rendering Extension client libra
ii libxt6 1:1.0.2-2 X11 toolkit intrinsics library
ii libxtst6 1:1.0.1-5 X11 Testing -- Resource extension
ii zlib1g 1:1.2.3-13 compression library - runtime
Versions of packages kdebase-bin recommends:
ii gdb 6.4.90.dfsg-1 The GNU Debugger
-- no debconf information
--
Regards,
Sasha.
Alexandra N. Kossovsky, software engineer.
e-mail: sasha@sanechka.spb.ru
--- End Message ---