Re: login into workstation impossible

Hi,

Some additional information below

Frans Spiesschaert schreef op do 19-12-2024 om 17:39 [+0100]:
> Hi,
> 
> After I changed a diskless workstation into a workstation, users are
> no
> longer able to log into it.
> I installed the system via the servers PXE menu.
> I added it to Gosa with sitesummary2ldapdhcp.
> I made the system a member of the NIS Netgroups all-hosts,
> fsautoresize-hosts, printer-hosts, workstation-hosts.
> I rebooted the system, logged into it as root and did run
> /usr/share/debian-edu-config/tools/copy-host-keytab.
> 
> So far so good, but after I rebooted the system again, still only
> root
> is able to log into it.
> 
> /var/log/auth.log reads as follows:
> 
> 2024-12-19T16:58:06.101160+01:00 Joy-it lightdm:
> pam_krb5(lightdm:auth): (user lieve) credential verification failed:
> Cannot find key for host/Joy-it.intern@INTERN kvno 3 in keytab

This entry shows that lightdm is looking for a key with a kvno value of
3 in the keytab file, but this value is set to 2 in the host keytab:

ktutil:  read_kt /etc/krb5.keytab
ktutil:  list
slot KVNO Principal
---- ---- -------------------------------------------------------------
   1    2                host/Joy-it.intern@INTERN
   2    2                host/Joy-it.intern@INTERN
   3    2                 nfs/Joy-it.intern@INTERN
   4    2                 nfs/Joy-it.intern@INTERN

I have no clue how to lower the kvno value in the lightdm request or
how to increase that value in /etc/krb5.keytab.

(After root did login to workstation Joy-it, user lieve does not have
any problem to get initial credentials at the command line with kinit)

> 
> 2024-12-19T16:58:06.101375+01:00 Joy-it lightdm:
> pam_krb5(lightdm:auth): authentication failure; logname=lieve uid=0
> euid=0 tty=:0 ruser= rhost=
> 
> 2024-12-19T16:58:06.103157+01:00 Joy-it lightdm:
> pam_unix(lightdm:auth): authentication failure; logname= uid=0 euid=0
> tty=:0 ruser= rhost=  user=lieve
> 
> 2024-12-19T16:58:25.664499+01:00 Joy-it lightdm: gkr-pam: unable to
> locate daemon control file
> 
> 2024-12-19T16:58:25.664762+01:00 Joy-it lightdm: gkr-pam: stashed
> password to try later in open session
> 
> 2024-12-19T16:58:25.847073+01:00 Joy-it lightdm:
> pam_unix(lightdm-greeter:session): session closed for user lightdm
> 
> 
> Anybody a hint to solve this issue?
>  
> 

-- 
Met vriendelijke groet,
Frans Spiesschaert

-----BEGIN PGP SIGNATURE-----
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=fLad
-----END PGP SIGNATURE-----