[RFE] Better diagnose keytab mismatch

[sssd-bot]

Cloned from Pagure issue: https://pagure.io/SSSD/sssd/issue/1518

• Created at 2012-09-10 21:10:11 by dpal
• Closed at 2020-03-24 14:12:26 as wontfix
• Assigned to nobody

---

There have been different issues reported on the list in the past related to the hard to detect misconfigurations of kerberos. It would be nice to be able to automatically detect some of such issues and report them.
For example thread https://lists.fedorahosted.org/pipermail/sssd-users/2012-September/000168.html was talking about mismatch of the kerberos encryption types and encryption types available in the keytab.
If we can look at the keytab and validate that the principal is correct, that all required encryption types are present and so on and report all issues in advance we would save a lot of time for our community, customers and support.

Comments

---

Comment from dpal at 2012-09-10 21:10:26

Fields changed

type: defect => enhancement

---

Comment from dpal at 2012-09-10 21:16:52

Fields changed

summary: [RFE] Bette diagnose keytab mismatch => [RFE] Better diagnose keytab mismatch

---

Comment from dpal at 2012-09-13 15:24:36

Fields changed

milestone: NEEDS_TRIAGE => SSSD 1.11 beta
rhbz: => 0
type: enhancement => task

---

Comment from dpal at 2013-01-02 15:23:30

Fields changed

milestone: SSSD 1.11 beta => SSSD 1.12 beta

---

Comment from dpal at 2013-12-02 21:19:54

Fields changed

type: task => enhancement

---

Comment from jhrozek at 2016-02-16 13:29:38

This ticket makes sense, but the 1.14 milestone is already too big. I'm moving the ticket to 1.15 beta

changelog: =>
design: =>
design_review: => 0
fedora_test_page: =>
mark: => 0
milestone: SSSD 1.14 beta => SSSD 1.15 beta
review: => 0
selected: =>
sensitive: => 0

---

Comment from dpal at 2017-02-24 14:43:22

Metadata Update from @dpal:

• Issue set to the milestone: SSSD Future releases (no date set yet)

---

Comment from thalman at 2020-03-13 14:22:46

Metadata Update from @thalman:

• Custom field design_review reset (from 0)
• Custom field mark reset (from 0)
• Custom field patch reset (from 0)
• Custom field review reset (from 0)
• Custom field sensitive reset (from 0)
• Custom field testsupdated reset (from 0)
• Issue close_status updated to: None
• Issue tagged with: Canditate to close

---

Comment from pbrezina at 2020-03-24 14:12:26

Thank you for taking time to submit this request for SSSD. Unfortunately this issue was not given priority and the team lacks the capacity to work on it at this time.

Given that we are unable to fulfill this request I am closing the issue as wontfix.

If the issue still persist on recent SSSD you can request re-consideration of this decision by reopening this issue. Please provide additional technical details about its importance to you.

Thank you for understanding.

---

Comment from pbrezina at 2020-03-24 14:12:27

Metadata Update from @pbrezina:

• Issue close_status updated to: wontfix
• Issue status updated to: Closed (was: Open)