Login failure: Enterprise Principal enabled by default for AD Provider #2963

sssd-bot · 2020-05-02T12:51:25Z

Cloned from Pagure issue: https://pagure.io/SSSD/sssd/issue/1921

Created at 2013-05-10 10:53:41 by jhrozek
Closed as Fixed
Assigned to sbose
Associated bugzillas
- https://bugzilla.redhat.com/show_bug.cgi?id=961278

Ticket was cloned from Red Hat Bugzilla (product Fedora): Bug 961278

Created attachment 745610
/var/log/sssd/krb5_child.log

Description of problem:
Login failure: Enterprise Principal enabled by default for AD Provider

Version-Release number of selected component (if applicable):
1.10.0-5

How reproducible:
Always

Steps to Reproduce:
1. Using realmd, add the client to an AD Server.

2. Try to login.
$ ssh -l 'SSSDAD\tuser1' localhost
SSSDAD\tuser1@localhost's password:
Permission denied, please try again.
SSSDAD\tuser1@localhost's password:
Permission denied, please try again.
SSSDAD\tuser1@localhost's password:


Actual results:
Login fails.

krb5_child.log shows:
(Thu May  9 06:32:33 2013) [[sssd[krb5_child[6930]]]] [sss_child_krb5_trace_cb]
(0x4000): [6930] 1368095553.283185: Initializing MEMORY:I4Prq7V with default
princ tuser1\@SSSDAD.COM@SSSDAD.COM

(Thu May  9 06:32:33 2013) [[sssd[krb5_child[6930]]]] [sss_child_krb5_trace_cb]
(0x4000): [6930] 1368095553.283363: Removing tuser1\@SSSDAD.COM@SSSDAD.COM ->
krbtgt/SSSDAD.COM@SSSDAD.COM from MEMORY:I4Prq7V

(Thu May  9 06:32:33 2013) [[sssd[krb5_child[6930]]]] [sss_child_krb5_trace_cb]
(0x4000): [6930] 1368095553.283525: Storing tuser1\@SSSDAD.COM@SSSDAD.COM ->
krbtgt/SSSDAD.COM@SSSDAD.COM in MEMORY:I4Prq7V

(Thu May  9 06:32:33 2013) [[sssd[krb5_child[6930]]]] [sss_child_krb5_trace_cb]
(0x4000): [6930] 1368095553.283722: Getting credentials
tuser1\@SSSDAD.COM@SSSDAD.COM -> host/dhcp207-114.sssdad.com@SSSDAD.COM using
ccache MEMORY:I4Prq7V

(Thu May  9 06:32:33 2013) [[sssd[krb5_child[6930]]]] [sss_child_krb5_trace_cb]
(0x4000): [6930] 1368095553.283964: Retrieving tuser1\@SSSDAD.COM@SSSDAD.COM ->
host/dhcp207-114.sssdad.com@SSSDAD.COM from MEMORY:I4Prq7V with result:
-1765328243/Matching credential not found



Expected results:
Login should work.

Additional info:
Refer to the attached krb5_child.log

Comments

Comment from jhrozek at 2013-05-10 10:54:04

Fields changed

blockedby: =>
blocking: =>
coverity: =>
design: =>
design_review: => 0
feature_milestone: =>
fedora_test_page: =>
owner: somebody => sbose
review: True => 0
selected: =>
testsupdated: => 0

Comment from sbose at 2013-05-13 16:13:54

Fields changed

patch: 0 => 1

Comment from jhrozek at 2013-05-14 17:47:28