[Freeipa-users] weird behavior on centos 6

[Carl E. Ma]

Thanks for all your responses! Yes, the GSS proxy is not available on 
RHEL-6. For the time being, we can live with krb5_renewable_lifetime = 
365d.

For my own curiosity, what kind of debugging tips or recommendations 
included in BZ - https://bugzilla.redhat.com/show_bug.cgi?id=846109, 
which I can't access with regular Redhat Bugzilla account?

Thanks a lot,

carl


From: Rob Crittenden <rcritten redhat com>
To: dpal redhat com, freeipa-users redhat com
Subject: Re: [Freeipa-users] weird behavior on centos 6
Date: Thu, 15 May 2014 09:46:28 -0400

Dmitri Pal wrote:

     On 05/14/2014 06:12 PM, Carl E. Ma wrote:

         Hello,

         Recently I realized our centos 6 freeipa clients hangs 
randomly. With
         some research, the issue is related to autofs bug, which was 
mentioned
         year ago - Automount fails for IPA user when kerberos ticket is
         expired, ssh hangs (https://fedorahosted.org/freeipa/ticket/2980).
         This ticket was closed with comment - "closed defect: invalid".

         My workaround is extending  ticket_lifetime to 24h and 
renew_lifetime
         to 365d. I wonder whether there is better solution or some 
insights of
         this bug.

         Thanks,

         carl


     Read about GSS proxy.


I don't believe gss-proxy is available for RHEL-6 and backporting is 
unlikely.


The ticket is closed but the associated BZ is still open, 
https://bugzilla.redhat.com/show_bug.cgi?id=846109 and has some 
debugging tips and other recommendations.


rob