Hi folks,
I just updated two F35 systems with updates-testing enabled and then `klist` etc. stopped working for me. Some investigation seems to indicate that the sssd-2.6.0 update may be involved---downgrading back to 2.5.2 immediately fixes the issue on both systems. The update however, has 3+ karma already, so it's on it's way to stable:
https://bodhi.fedoraproject.org/updates/FEDORA-2021-360425682d
Could more folks please test it out to see if it's a package update related bug? (I've not touched my configs at all as far as I can remember, so it *shouldn't* be specific to my two machines).
If it's a general issue, it'll break kinit etc. for all package maintainers as soon as they get the update. (Running `fedpkg new-sources` was how I ran into the issue).
Ankur Sinha kirjoitti 22.10.2021 klo 17.56:
Hi folks,
I just updated two F35 systems with updates-testing enabled and then `klist` etc. stopped working for me. Some investigation seems to indicate that the sssd-2.6.0 update may be involved---downgrading back to 2.5.2 immediately fixes the issue on both systems. The update however, has 3+ karma already, so it's on it's way to stable:
https://bodhi.fedoraproject.org/updates/FEDORA-2021-360425682d
Could more folks please test it out to see if it's a package update related bug? (I've not touched my configs at all as far as I can remember, so it *shouldn't* be specific to my two machines).
If it's a general issue, it'll break kinit etc. for all package maintainers as soon as they get the update. (Running `fedpkg new-sources` was how I ran into the issue).
Hi,
I am sure exactly what should break, but I could not reproduce this:
1. $ sudo dnf upgrade --enablerepo=updates-testing --advisory=FEDORA-2021-360425682d 2. reboot just to be sure 3. $ kinit user@FEDORAPROJECT.ORG 4. Enter password as requested 5. $ klist 6. $ fedpkg new-sources <somefile>
Everything still works. In the new-sources step I used a file that was already in the cache, so that the cache would not be polluted by files added just for testing. Does that make a difference?
Otto
On Sat, Oct 23, 2021 14:09:55 +0300, Otto Urpelainen wrote:
Ankur Sinha kirjoitti 22.10.2021 klo 17.56:
<snip>
Hi,
Hi,
I am sure exactly what should break, but I could not reproduce this:
Thanks for testing it out.
- $ sudo dnf upgrade --enablerepo=updates-testing
--advisory=FEDORA-2021-360425682d 2. reboot just to be sure 3. $ kinit user@FEDORAPROJECT.ORG 4. Enter password as requested 5. $ klist 6. $ fedpkg new-sources <somefile>
Everything still works. In the new-sources step I used a file that was already in the cache, so that the cache would not be polluted by files added just for testing. Does that make a difference?
I don't *think* so. In my case there was no cache file at `/tmp/..` at all. This is the complete upgrade transaction but my limited knowledge of klist etc. doesn't tell me if anything else could be involved. Even now, upgrading sssd stops kinit from working. I'll go try another update and reboot and see if it helps:
Transaction ID : 760 Begin time : Wed 20 Oct 2021 18:44:54 BST Begin rpmdb : 3666:95fd579de57a4f33896281a9940dda36be2b6442 End time : Wed 20 Oct 2021 18:46:34 BST (100 seconds) End rpmdb : 3667:777c44781207263b870f12bb21e763ac68b7aac6 User : System <unset> Return-Code : Success Releasever : 35 Command Line : system-upgrade upgrade Comment : Packages Altered: Reason Change Box2D-2.4.1-6.fc35.x86_64 @fedora Install flite-2.2-1.fc35.x86_64 @updates-testing Install kernel-5.14.12-300.fc35.x86_64 @updates-testing Install kernel-core-5.14.12-300.fc35.x86_64 @updates-testing Install kernel-modules-5.14.12-300.fc35.x86_64 @updates-testing Upgrade neomutt-5:20211015-1.fc35.x86_64 @copr:copr.fedorainfracloud.org:flatcap:neomutt Upgraded neomutt-5:20210205-1.fc34.x86_64 @@System Upgrade glib2-2.70.0-5.fc35.x86_64 @fedora Upgraded glib2-2.70.0-4.fc35.x86_64 @@System Upgrade gnome-session-40.1.1-3.fc35.x86_64 @fedora Upgraded gnome-session-40.1.1-2.fc35.x86_64 @@System Upgrade gnome-session-wayland-session-40.1.1-3.fc35.x86_64 @fedora Upgraded gnome-session-wayland-session-40.1.1-2.fc35.x86_64 @@System Upgrade gnome-session-xsession-40.1.1-3.fc35.x86_64 @fedora Upgraded gnome-session-xsession-40.1.1-2.fc35.x86_64 @@System Upgrade jq-1.6-10.fc35.x86_64 @fedora Upgraded jq-1.6-9.fc35.x86_64 @@System Upgrade gstreamer1-plugin-openh264-1.19.1-1.fc35.x86_64 @fedora-cisco-openh264 Upgraded gstreamer1-plugin-openh264-1.18.2-1.fc35.x86_64 @@System Upgrade mozilla-openh264-2.1.1-3.fc35.x86_64 @fedora-cisco-openh264 Upgraded mozilla-openh264-2.1.1-2.fc35.x86_64 @@System Upgrade openh264-2.1.1-3.fc35.x86_64 @fedora-cisco-openh264 Upgraded openh264-2.1.1-2.fc35.x86_64 @@System Upgrade adobe-mappings-cmap-20190730-1.fc35.noarch @updates-testing Upgraded adobe-mappings-cmap-20171205-11.fc35.noarch @@System Upgrade adobe-mappings-cmap-deprecated-20190730-1.fc35.noarch @updates-testing Upgraded adobe-mappings-cmap-deprecated-20171205-11.fc35.noarch @@System Upgrade bluez-5.62-1.fc35.x86_64 @updates-testing Upgraded bluez-5.61-1.fc35.x86_64 @@System Upgrade bluez-cups-5.62-1.fc35.x86_64 @updates-testing Upgraded bluez-cups-5.61-1.fc35.x86_64 @@System Upgrade bluez-libs-5.62-1.fc35.x86_64 @updates-testing Upgraded bluez-libs-5.61-1.fc35.x86_64 @@System Upgrade bluez-obexd-5.62-1.fc35.x86_64 @updates-testing Upgraded bluez-obexd-5.61-1.fc35.x86_64 @@System Upgrade container-selinux-2:2.170.0-2.fc35.noarch @updates-testing Upgraded container-selinux-2:2.170.0-1.fc35.noarch @@System Upgrade environment-modules-5.0.1-1.fc35.x86_64 @updates-testing Upgraded environment-modules-5.0.0-1.fc35.x86_64 @@System Upgrade fedora-third-party-0.8-1.fc35.noarch @updates-testing Upgraded fedora-third-party-0.7-1.fc35.noarch @@System Upgrade git-2.33.1-1.fc35.x86_64 @updates-testing Upgraded git-2.33.0-1.fc35.x86_64 @@System Upgrade git-all-2.33.1-1.fc35.noarch @updates-testing Upgraded git-all-2.33.0-1.fc35.noarch @@System Upgrade git-core-2.33.1-1.fc35.x86_64 @updates-testing Upgraded git-core-2.33.0-1.fc35.x86_64 @@System Upgrade git-core-doc-2.33.1-1.fc35.noarch @updates-testing Upgraded git-core-doc-2.33.0-1.fc35.noarch @@System Upgrade git-credential-libsecret-2.33.1-1.fc35.x86_64 @updates-testing Upgraded git-credential-libsecret-2.33.0-1.fc35.x86_64 @@System Upgrade git-cvs-2.33.1-1.fc35.noarch @updates-testing Upgraded git-cvs-2.33.0-1.fc35.noarch @@System Upgrade git-daemon-2.33.1-1.fc35.x86_64 @updates-testing Upgraded git-daemon-2.33.0-1.fc35.x86_64 @@System Upgrade git-email-2.33.1-1.fc35.noarch @updates-testing Upgraded git-email-2.33.0-1.fc35.noarch @@System Upgrade git-gui-2.33.1-1.fc35.noarch @updates-testing Upgraded git-gui-2.33.0-1.fc35.noarch @@System Upgrade git-instaweb-2.33.1-1.fc35.noarch @updates-testing Upgraded git-instaweb-2.33.0-1.fc35.noarch @@System Upgrade git-p4-2.33.1-1.fc35.noarch @updates-testing Upgraded git-p4-2.33.0-1.fc35.noarch @@System Upgrade git-subtree-2.33.1-1.fc35.x86_64 @updates-testing Upgraded git-subtree-2.33.0-1.fc35.x86_64 @@System Upgrade git-svn-2.33.1-1.fc35.noarch @updates-testing Upgraded git-svn-2.33.0-1.fc35.noarch @@System Upgrade gitk-2.33.1-1.fc35.noarch @updates-testing Upgraded gitk-2.33.0-1.fc35.noarch @@System Upgrade gitweb-2.33.1-1.fc35.noarch @updates-testing Upgraded gitweb-2.33.0-1.fc35.noarch @@System Upgrade htop-3.1.1-1.fc35.x86_64 @updates-testing Upgraded htop-3.0.5-5.fc35.x86_64 @@System Upgrade httpie-2.6.0-1.fc35.noarch @updates-testing Upgraded httpie-2.5.0-1.fc35.noarch @@System Upgrade jdom2-2.0.6-24.fc35.noarch @updates-testing Upgraded jdom2-2.0.6-23.fc35.noarch @@System Upgrade libipa_hbac-2.6.0-1.fc35.x86_64 @updates-testing Upgraded libipa_hbac-2.5.2-5.fc35.x86_64 @@System Upgrade libsss_autofs-2.6.0-1.fc35.x86_64 @updates-testing Upgraded libsss_autofs-2.5.2-5.fc35.x86_64 @@System Upgrade libsss_certmap-2.6.0-1.fc35.x86_64 @updates-testing Upgraded libsss_certmap-2.5.2-5.fc35.x86_64 @@System Upgrade libsss_idmap-2.6.0-1.fc35.x86_64 @updates-testing Upgraded libsss_idmap-2.5.2-5.fc35.x86_64 @@System Upgrade libsss_nss_idmap-2.6.0-1.fc35.x86_64 @updates-testing Upgraded libsss_nss_idmap-2.5.2-5.fc35.x86_64 @@System Upgrade libsss_sudo-2.6.0-1.fc35.x86_64 @updates-testing Upgraded libsss_sudo-2.5.2-5.fc35.x86_64 @@System Upgrade libzapojit-0.0.3-21.fc35.x86_64 @updates-testing Upgraded libzapojit-0.0.3-20.fc35.x86_64 @@System Upgrade mesa-dri-drivers-21.2.4-1.fc35.x86_64 @updates-testing Upgraded mesa-dri-drivers-21.2.3-6.fc35.x86_64 @@System Upgrade mesa-filesystem-21.2.4-1.fc35.x86_64 @updates-testing Upgraded mesa-filesystem-21.2.3-6.fc35.x86_64 @@System Upgrade mesa-libEGL-21.2.4-1.fc35.x86_64 @updates-testing Upgraded mesa-libEGL-21.2.3-6.fc35.x86_64 @@System Upgrade mesa-libGL-21.2.4-1.fc35.x86_64 @updates-testing Upgraded mesa-libGL-21.2.3-6.fc35.x86_64 @@System Upgrade mesa-libOpenCL-21.2.4-1.fc35.x86_64 @updates-testing Upgraded mesa-libOpenCL-21.2.3-6.fc35.x86_64 @@System Upgrade mesa-libgbm-21.2.4-1.fc35.x86_64 @updates-testing Upgraded mesa-libgbm-21.2.3-6.fc35.x86_64 @@System Upgrade mesa-libglapi-21.2.4-1.fc35.x86_64 @updates-testing Upgraded mesa-libglapi-21.2.3-6.fc35.x86_64 @@System Upgrade mesa-libxatracker-21.2.4-1.fc35.x86_64 @updates-testing Upgraded mesa-libxatracker-21.2.3-6.fc35.x86_64 @@System Upgrade mesa-vulkan-drivers-21.2.4-1.fc35.x86_64 @updates-testing Upgraded mesa-vulkan-drivers-21.2.3-6.fc35.x86_64 @@System Upgrade nodejs-1:16.11.1-1.fc35.x86_64 @updates-testing Upgraded nodejs-1:16.10.0-1.fc35.x86_64 @@System Upgrade nodejs-docs-1:16.11.1-1.fc35.noarch @updates-testing Upgraded nodejs-docs-1:16.10.0-1.fc35.noarch @@System Upgrade nodejs-full-i18n-1:16.11.1-1.fc35.x86_64 @updates-testing Upgraded nodejs-full-i18n-1:16.10.0-1.fc35.x86_64 @@System Upgrade nodejs-libs-1:16.11.1-1.fc35.x86_64 @updates-testing Upgraded nodejs-libs-1:16.10.0-1.fc35.x86_64 @@System Upgrade npm-1:8.0.0-1.16.11.1.1.fc35.x86_64 @updates-testing Upgraded npm-1:7.24.0-1.16.10.0.1.fc35.x86_64 @@System Upgrade openttd-12.0-1.fc35.x86_64 @updates-testing Upgraded openttd-1.11.2-4.fc35.x86_64 @@System Upgrade pcsc-lite-ccid-1.4.36-2.fc35.x86_64 @updates-testing Upgraded pcsc-lite-ccid-1.4.36-1.fc35.x86_64 @@System Upgrade perl-AutoLoader-5.74-482.fc35.noarch @updates-testing Upgraded perl-AutoLoader-5.74-481.fc35.noarch @@System Upgrade perl-B-1.82-482.fc35.x86_64 @updates-testing Upgraded perl-B-1.82-481.fc35.x86_64 @@System Upgrade perl-Class-Struct-0.66-482.fc35.noarch @updates-testing Upgraded perl-Class-Struct-0.66-481.fc35.noarch @@System Upgrade perl-DateTime-TimeZone-2.50-1.fc35.noarch @updates-testing Upgraded perl-DateTime-TimeZone-2.49-1.fc35.noarch @@System Upgrade perl-DirHandle-1.05-482.fc35.noarch @updates-testing Upgraded perl-DirHandle-1.05-481.fc35.noarch @@System Upgrade perl-DynaLoader-1.50-482.fc35.x86_64 @updates-testing Upgraded perl-DynaLoader-1.50-481.fc35.x86_64 @@System Upgrade perl-English-1.11-482.fc35.noarch @updates-testing Upgraded perl-English-1.11-481.fc35.noarch @@System Upgrade perl-Errno-1.33-482.fc35.x86_64 @updates-testing Upgraded perl-Errno-1.33-481.fc35.x86_64 @@System Upgrade perl-Fcntl-1.14-482.fc35.x86_64 @updates-testing Upgraded perl-Fcntl-1.14-481.fc35.x86_64 @@System Upgrade perl-File-Basename-2.85-482.fc35.noarch @updates-testing Upgraded perl-File-Basename-2.85-481.fc35.noarch @@System Upgrade perl-File-Compare-1.100.600-482.fc35.noarch @updates-testing Upgraded perl-File-Compare-1.100.600-481.fc35.noarch @@System Upgrade perl-File-Copy-2.35-482.fc35.noarch @updates-testing Upgraded perl-File-Copy-2.35-481.fc35.noarch @@System Upgrade perl-File-Find-1.39-482.fc35.noarch @updates-testing Upgraded perl-File-Find-1.39-481.fc35.noarch @@System Upgrade perl-File-stat-1.09-482.fc35.noarch @updates-testing Upgraded perl-File-stat-1.09-481.fc35.noarch @@System Upgrade perl-FileHandle-2.03-482.fc35.noarch @updates-testing Upgraded perl-FileHandle-2.03-481.fc35.noarch @@System Upgrade perl-FindBin-1.52-482.fc35.noarch @updates-testing Upgraded perl-FindBin-1.52-481.fc35.noarch @@System Upgrade perl-Getopt-Std-1.13-482.fc35.noarch @updates-testing Upgraded perl-Getopt-Std-1.13-481.fc35.noarch @@System Upgrade perl-Git-2.33.1-1.fc35.noarch @updates-testing Upgraded perl-Git-2.33.0-1.fc35.noarch @@System Upgrade perl-Git-SVN-2.33.1-1.fc35.noarch @updates-testing Upgraded perl-Git-SVN-2.33.0-1.fc35.noarch @@System Upgrade perl-Hash-Util-FieldHash-1.21-482.fc35.x86_64 @updates-testing Upgraded perl-Hash-Util-FieldHash-1.21-481.fc35.x86_64 @@System Upgrade perl-I18N-LangTags-0.45-482.fc35.noarch @updates-testing Upgraded perl-I18N-LangTags-0.45-481.fc35.noarch @@System Upgrade perl-I18N-Langinfo-0.19-482.fc35.x86_64 @updates-testing Upgraded perl-I18N-Langinfo-0.19-481.fc35.x86_64 @@System Upgrade perl-IO-1.46-482.fc35.x86_64 @updates-testing Upgraded perl-IO-1.46-481.fc35.x86_64 @@System Upgrade perl-IPC-Open3-1.21-482.fc35.noarch @updates-testing Upgraded perl-IPC-Open3-1.21-481.fc35.noarch @@System Upgrade perl-Locale-Maketext-Simple-1:0.21-482.fc35.noarch @updates-testing Upgraded perl-Locale-Maketext-Simple-1:0.21-481.fc35.noarch @@System Upgrade perl-Math-Complex-1.59-482.fc35.noarch @updates-testing Upgraded perl-Math-Complex-1.59-481.fc35.noarch @@System Upgrade perl-Memoize-1.03-482.fc35.noarch @updates-testing Upgraded perl-Memoize-1.03-481.fc35.noarch @@System Upgrade perl-NDBM_File-1.15-482.fc35.x86_64 @updates-testing Upgraded perl-NDBM_File-1.15-481.fc35.x86_64 @@System Upgrade perl-Opcode-1.50-482.fc35.x86_64 @updates-testing Upgraded perl-Opcode-1.50-481.fc35.x86_64 @@System Upgrade perl-POSIX-1.97-482.fc35.x86_64 @updates-testing Upgraded perl-POSIX-1.97-481.fc35.x86_64 @@System Upgrade perl-Pod-Html-1.27-482.fc35.noarch @updates-testing Upgraded perl-Pod-Html-1.27-481.fc35.noarch @@System Upgrade perl-Safe-2.43-482.fc35.noarch @updates-testing Upgraded perl-Safe-2.43-481.fc35.noarch @@System Upgrade perl-SelectSaver-1.02-482.fc35.noarch @updates-testing Upgraded perl-SelectSaver-1.02-481.fc35.noarch @@System Upgrade perl-SelfLoader-1.26-482.fc35.noarch @updates-testing Upgraded perl-SelfLoader-1.26-481.fc35.noarch @@System Upgrade perl-Symbol-1.09-482.fc35.noarch @updates-testing Upgraded perl-Symbol-1.09-481.fc35.noarch @@System Upgrade perl-Sys-Hostname-1.23-482.fc35.x86_64 @updates-testing Upgraded perl-Sys-Hostname-1.23-481.fc35.x86_64 @@System Upgrade perl-Term-ReadLine-1.17-482.fc35.noarch @updates-testing Upgraded perl-Term-ReadLine-1.17-481.fc35.noarch @@System Upgrade perl-Tie-4.6-482.fc35.noarch @updates-testing Upgraded perl-Tie-4.6-481.fc35.noarch @@System Upgrade perl-Unicode-UCD-0.75-482.fc35.noarch @updates-testing Upgraded perl-Unicode-UCD-0.75-481.fc35.noarch @@System Upgrade perl-base-2.27-482.fc35.noarch @updates-testing Upgraded perl-base-2.27-481.fc35.noarch @@System Upgrade perl-deprecate-0.04-482.fc35.noarch @updates-testing Upgraded perl-deprecate-0.04-481.fc35.noarch @@System Upgrade perl-filetest-1.03-482.fc35.noarch @updates-testing Upgraded perl-filetest-1.03-481.fc35.noarch @@System Upgrade perl-if-0.60.900-482.fc35.noarch @updates-testing Upgraded perl-if-0.60.900-481.fc35.noarch @@System Upgrade perl-interpreter-4:5.34.0-482.fc35.x86_64 @updates-testing Upgraded perl-interpreter-4:5.34.0-481.fc35.x86_64 @@System Upgrade perl-lib-0.65-482.fc35.x86_64 @updates-testing Upgraded perl-lib-0.65-481.fc35.x86_64 @@System Upgrade perl-libs-4:5.34.0-482.fc35.x86_64 @updates-testing Upgraded perl-libs-4:5.34.0-481.fc35.x86_64 @@System Upgrade perl-locale-1.10-482.fc35.noarch @updates-testing Upgraded perl-locale-1.10-481.fc35.noarch @@System Upgrade perl-macros-4:5.34.0-482.fc35.noarch @updates-testing Upgraded perl-macros-4:5.34.0-481.fc35.noarch @@System Upgrade perl-meta-notation-5.34.0-482.fc35.noarch @updates-testing Upgraded perl-meta-notation-5.34.0-481.fc35.noarch @@System Upgrade perl-mro-1.25-482.fc35.x86_64 @updates-testing Upgraded perl-mro-1.25-481.fc35.x86_64 @@System Upgrade perl-open-1.12-482.fc35.noarch @updates-testing Upgraded perl-open-1.12-481.fc35.noarch @@System Upgrade perl-overload-1.33-482.fc35.noarch @updates-testing Upgraded perl-overload-1.33-481.fc35.noarch @@System Upgrade perl-overloading-0.02-482.fc35.noarch @updates-testing Upgraded perl-overloading-0.02-481.fc35.noarch @@System Upgrade perl-sigtrap-1.09-482.fc35.noarch @updates-testing Upgraded perl-sigtrap-1.09-481.fc35.noarch @@System Upgrade perl-subs-1.04-482.fc35.noarch @updates-testing Upgraded perl-subs-1.04-481.fc35.noarch @@System Upgrade perl-vars-1.05-482.fc35.noarch @updates-testing Upgraded perl-vars-1.05-481.fc35.noarch @@System Upgrade python3-google-api-core-2.1.1-1.fc35.noarch @updates-testing Upgraded python3-google-api-core-2.1.0-1.fc35.noarch @@System Upgrade python3-reportlab-3.6.2-1.fc35.x86_64 @updates-testing Upgraded python3-reportlab-3.6.1-1.fc35.x86_64 @@System Upgrade python3-speechd-0.10.2-6.fc35.x86_64 @updates-testing Upgraded python3-speechd-0.10.2-5.fc35.x86_64 @@System Upgrade python3-sssdconfig-2.6.0-1.fc35.noarch @updates-testing Upgraded python3-sssdconfig-2.5.2-5.fc35.noarch @@System Upgrade selinux-policy-35.2-1.fc35.noarch @updates-testing Upgraded selinux-policy-35.1-1.fc35.noarch @@System Upgrade selinux-policy-minimum-35.2-1.fc35.noarch @updates-testing Upgraded selinux-policy-minimum-35.1-1.fc35.noarch @@System Upgrade selinux-policy-targeted-35.2-1.fc35.noarch @updates-testing Upgraded selinux-policy-targeted-35.1-1.fc35.noarch @@System Upgrade speech-dispatcher-0.10.2-6.fc35.x86_64 @updates-testing Upgraded speech-dispatcher-0.10.2-5.fc35.x86_64 @@System Upgrade speech-dispatcher-espeak-ng-0.10.2-6.fc35.x86_64 @updates-testing Upgraded speech-dispatcher-espeak-ng-0.10.2-5.fc35.x86_64 @@System Upgrade sssd-2.6.0-1.fc35.x86_64 @updates-testing Upgraded sssd-2.5.2-5.fc35.x86_64 @@System Upgrade sssd-ad-2.6.0-1.fc35.x86_64 @updates-testing Upgraded sssd-ad-2.5.2-5.fc35.x86_64 @@System Upgrade sssd-client-2.6.0-1.fc35.x86_64 @updates-testing Upgraded sssd-client-2.5.2-5.fc35.x86_64 @@System Upgrade sssd-common-2.6.0-1.fc35.x86_64 @updates-testing Upgraded sssd-common-2.5.2-5.fc35.x86_64 @@System Upgrade sssd-common-pac-2.6.0-1.fc35.x86_64 @updates-testing Upgraded sssd-common-pac-2.5.2-5.fc35.x86_64 @@System Upgrade sssd-ipa-2.6.0-1.fc35.x86_64 @updates-testing Upgraded sssd-ipa-2.5.2-5.fc35.x86_64 @@System Upgrade sssd-kcm-2.6.0-1.fc35.x86_64 @updates-testing Upgraded sssd-kcm-2.5.2-5.fc35.x86_64 @@System Upgrade sssd-krb5-2.6.0-1.fc35.x86_64 @updates-testing Upgraded sssd-krb5-2.5.2-5.fc35.x86_64 @@System Upgrade sssd-krb5-common-2.6.0-1.fc35.x86_64 @updates-testing Upgraded sssd-krb5-common-2.5.2-5.fc35.x86_64 @@System Upgrade sssd-ldap-2.6.0-1.fc35.x86_64 @updates-testing Upgraded sssd-ldap-2.5.2-5.fc35.x86_64 @@System Upgrade sssd-nfs-idmap-2.6.0-1.fc35.x86_64 @updates-testing Upgraded sssd-nfs-idmap-2.5.2-5.fc35.x86_64 @@System Upgrade sssd-proxy-2.6.0-1.fc35.x86_64 @updates-testing Upgraded sssd-proxy-2.5.2-5.fc35.x86_64 @@System Upgrade valgrind-1:3.18.1-1.fc35.x86_64 @updates-testing Upgraded valgrind-1:3.17.0-13.fc35.x86_64 @@System Upgrade vim-X11-2:8.2.3512-1.fc35.x86_64 @updates-testing Upgraded vim-X11-2:8.2.3404-1.fc35.x86_64 @@System Upgrade vim-common-2:8.2.3512-1.fc35.x86_64 @updates-testing Upgraded vim-common-2:8.2.3404-1.fc35.x86_64 @@System Upgrade vim-enhanced-2:8.2.3512-1.fc35.x86_64 @updates-testing Upgraded vim-enhanced-2:8.2.3404-1.fc35.x86_64 @@System Upgrade vim-filesystem-2:8.2.3512-1.fc35.noarch @updates-testing Upgraded vim-filesystem-2:8.2.3404-1.fc35.noarch @@System Upgrade vim-minimal-2:8.2.3512-1.fc35.x86_64 @updates-testing Upgraded vim-minimal-2:8.2.3404-1.fc35.x86_64 @@System Upgrade wget-1.21.2-1.fc35.x86_64 @updates-testing Upgraded wget-1.21.1-4.fc35.x86_64 @@System Upgrade wireplumber-0.4.4-1.fc35.x86_64 @updates-testing Upgraded wireplumber-0.4.3-2.fc35.x86_64 @@System Upgrade wireplumber-libs-0.4.4-1.fc35.x86_64 @updates-testing Upgraded wireplumber-libs-0.4.3-2.fc35.x86_64 @@System Removed kernel-5.14.9-300.fc35.x86_64 @@System Removed kernel-core-5.14.9-300.fc35.x86_64 @@System Removed kernel-modules-5.14.9-300.fc35.x86_64 @@System
On 10/22/21 16:56, Ankur Sinha wrote:
Hi folks,
I just updated two F35 systems with updates-testing enabled and then `klist` etc. stopped working for me. Some investigation seems to indicate that the sssd-2.6.0 update may be involved---downgrading back to 2.5.2 immediately fixes the issue on both systems. The update however, has 3+ karma already, so it's on it's way to stable:
https://bodhi.fedoraproject.org/updates/FEDORA-2021-360425682d
Could more folks please test it out to see if it's a package update related bug? (I've not touched my configs at all as far as I can remember, so it *shouldn't* be specific to my two machines).
If it's a general issue, it'll break kinit etc. for all package maintainers as soon as they get the update. (Running `fedpkg new-sources` was how I ran into the issue).
I've unpushed the package so far, so it won't be pushed to stable. Please open a bugzilla with KCM logs attached. Also please, provide output of failing klist with krb5 tracing enabled (KRB5_TRACE=/dev/stderr).
Thanks, Pavel.
On Mon, Oct 25, 2021 10:41:44 +0200, Pavel Březina wrote:
<snip> I've unpushed the package so far, so it won't be pushed to stable. Please open a bugzilla with KCM logs attached. Also please, provide output of failing klist with krb5 tracing enabled (KRB5_TRACE=/dev/stderr).
Thanks very much. I filed the initial report here: https://bugzilla.redhat.com/show_bug.cgi?id=2016992
On Fri, Oct 22, 2021 at 03:56:42PM +0100, Ankur Sinha wrote:
If it's a general issue, it'll break kinit etc. for all package maintainers as soon as they get the update. (Running `fedpkg new-sources` was how I ran into the issue).
I can't reproduce, but I'm _just_ using Fedora kerberos. (Theoretically my employer also has it, but having multiple realms involved is just too much work for me, and, you know, priorities.) It'd be good to get test reports from other organizations using kerberos in production.
On Tue, Oct 26, 2021 22:52:40 -0400, Matthew Miller wrote:
On Fri, Oct 22, 2021 at 03:56:42PM +0100, Ankur Sinha wrote:
If it's a general issue, it'll break kinit etc. for all package maintainers as soon as they get the update. (Running `fedpkg new-sources` was how I ran into the issue).
I can't reproduce, but I'm _just_ using Fedora kerberos. (Theoretically my employer also has it, but having multiple realms involved is just too much work for me, and, you know, priorities.) It'd be good to get test reports from other organizations using kerberos in production.
We narrowed it down on the bug, and a fix is now available. It was because my credentials were in an older format (because I upgrade and don't reinstall), and some tweaks had to be made to gracefully get my system to discard the older format and use the new credential format. So it only affects this particular corner case.
Alexey has mentioned a PR and a test build here which fixes the issue for me: https://bugzilla.redhat.com/show_bug.cgi?id=2016992#c17