Bug 14459 - Kerberos CC KEYRING pam_winbind
Summary: Kerberos CC KEYRING pam_winbind
Status: NEW
Alias: None
Product: Samba 4.1 and newer
Classification: Unclassified
Component: Winbind (show other bugs)
Version: 4.11.11
Hardware: All Linux
: P5 normal (vote)
Target Milestone: ---
Assignee: Samba QA Contact
QA Contact: Samba QA Contact
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2020-08-08 21:05 UTC by Jason Keltz
Modified: 2020-09-18 15:26 UTC (History)
1 user (show)

See Also:


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Jason Keltz 2020-08-08 21:05:37 UTC
We compiled Samba 4.11.11 on a CentOS 7.8 system.  samba/winbind setup on the AD server is working great, smbd and winbind on the file server is working great, and smbd and winbind on the clients.  Everything is working almost perfectly.  If I use FILE Kerberos CC in both /etc/krb5.conf and /etc/security/pam_winbind.conf, then when I login to the client, I get a Kerberos ticket.  On the other hand, if I use KEYRING, it does not work.  I'm pretty sure it's got to be something simple because I've read in various locations that this is working. How can I provide a additional debug logs to aid in resolving this issue?

(I don't know if I should be using --with-system-mitkrb5 on the compile.  At the moment, I use nothing and Samba happily finds Kerberos and uses it...)

Here's an ldd of smbd if that helps at all:

 ldd smbd
        linux-vdso.so.1 =>  (0x00007ffdd5d85000)
        libsamba-util.so.0 => /xsys/pkg/samba-4.11.11/lib/libsamba-util.so.0 (0x00007f767127d000)
        libsmbd-base-samba4.so => /xsys/pkg/samba-4.11.11/lib/private/libsmbd-base-samba4.so (0x00007f7670c90000)
        libpopt-samba3-samba4.so => /xsys/pkg/samba-4.11.11/lib/private/libpopt-samba3-samba4.so (0x00007f7670a8c000)
        libgenrand-samba4.so => /xsys/pkg/samba-4.11.11/lib/private/libgenrand-samba4.so (0x00007f767088a000)
        libsocket-blocking-samba4.so => /xsys/pkg/samba-4.11.11/lib/private/libsocket-blocking-samba4.so (0x00007f7670688000)
        libutil-setid-samba4.so => /xsys/pkg/samba-4.11.11/lib/private/libutil-setid-samba4.so (0x00007f7670486000)
        libtevent.so.0 => /xsys/pkg/samba-4.11.11/lib/private/libtevent.so.0 (0x00007f767026e000)
        libsamba-debug-samba4.so => /xsys/pkg/samba-4.11.11/lib/private/libsamba-debug-samba4.so (0x00007f7670065000)
        libsys-rw-samba4.so => /xsys/pkg/samba-4.11.11/lib/private/libsys-rw-samba4.so (0x00007f766fe62000)
        libtime-basic-samba4.so => /xsys/pkg/samba-4.11.11/lib/private/libtime-basic-samba4.so (0x00007f766fc60000)
        libtalloc.so.2 => /xsys/pkg/samba-4.11.11/lib/private/libtalloc.so.2 (0x00007f766fa56000)
        libreplace-samba4.so => /xsys/pkg/samba-4.11.11/lib/private/libreplace-samba4.so (0x00007f766f853000)
        libndr.so.0 => /xsys/pkg/samba-4.11.11/lib/libndr.so.0 (0x00007f766f636000)
        libtalloc-report-samba4.so => /xsys/pkg/samba-4.11.11/lib/private/libtalloc-report-samba4.so (0x00007f766f433000)
        libsmbd-conn-samba4.so => /xsys/pkg/samba-4.11.11/lib/private/libsmbd-conn-samba4.so (0x00007f766f230000)
        libmessages-util-samba4.so => /xsys/pkg/samba-4.11.11/lib/private/libmessages-util-samba4.so (0x00007f766f02e000)
        liblibsmb-samba4.so => /xsys/pkg/samba-4.11.11/lib/private/liblibsmb-samba4.so (0x00007f766eda7000)
        libdbwrap-samba4.so => /xsys/pkg/samba-4.11.11/lib/private/libdbwrap-samba4.so (0x00007f766eb9a000)
        libtdb.so.1 => /xsys/pkg/samba-4.11.11/lib/private/libtdb.so.1 (0x00007f766e97f000)
        libsamba-security-samba4.so => /xsys/pkg/samba-4.11.11/lib/private/libsamba-security-samba4.so (0x00007f766e75b000)
        libndr-samba-samba4.so => /xsys/pkg/samba-4.11.11/lib/private/libndr-samba-samba4.so (0x00007f766e382000)
        libkrb5samba-samba4.so => /xsys/pkg/samba-4.11.11/lib/private/libkrb5samba-samba4.so (0x00007f766e174000)
        libmessages-dgm-samba4.so => /xsys/pkg/samba-4.11.11/lib/private/libmessages-dgm-samba4.so (0x00007f766df66000)
        libprinting-migrate-samba4.so => /xsys/pkg/samba-4.11.11/lib/private/libprinting-migrate-samba4.so (0x00007f766dd4a000)
        libsmbconf.so.0 => /xsys/pkg/samba-4.11.11/lib/libsmbconf.so.0 (0x00007f766dab1000)
        libsamba-sockets-samba4.so => /xsys/pkg/samba-4.11.11/lib/private/libsamba-sockets-samba4.so (0x00007f766d896000)
        libtevent-util.so.0 => /xsys/pkg/samba-4.11.11/lib/libtevent-util.so.0 (0x00007f766d691000)
        libndr-krb5pac.so.0 => /xsys/pkg/samba-4.11.11/lib/libndr-krb5pac.so.0 (0x00007f766d480000)
        libgssapi-samba4.so.2 => /xsys/pkg/samba-4.11.11/lib/private/libgssapi-samba4.so.2 (0x00007f766d243000)
        libcliauth-samba4.so => /xsys/pkg/samba-4.11.11/lib/private/libcliauth-samba4.so (0x00007f766d02a000)
        libnpa-tstream-samba4.so => /xsys/pkg/samba-4.11.11/lib/private/libnpa-tstream-samba4.so (0x00007f766ce20000)
        libauth-samba4.so => /xsys/pkg/samba-4.11.11/lib/private/libauth-samba4.so (0x00007f766cbf0000)
        libcommon-auth-samba4.so => /xsys/pkg/samba-4.11.11/lib/private/libcommon-auth-samba4.so (0x00007f766c9e1000)
        libsamba3-util-samba4.so => /xsys/pkg/samba-4.11.11/lib/private/libsamba3-util-samba4.so (0x00007f766c7d4000)
        libserver-id-db-samba4.so => /xsys/pkg/samba-4.11.11/lib/private/libserver-id-db-samba4.so (0x00007f766c5d0000)
        libsamba-passdb.so.0 => /xsys/pkg/samba-4.11.11/lib/libsamba-passdb.so.0 (0x00007f766c34c000)
        libnet-keytab-samba4.so => /xsys/pkg/samba-4.11.11/lib/private/libnet-keytab-samba4.so (0x00007f766c146000)
        libsamba-errors.so.1 => /xsys/pkg/samba-4.11.11/lib/libsamba-errors.so.1 (0x00007f766bdf0000)
        libiov-buf-samba4.so => /xsys/pkg/samba-4.11.11/lib/private/libiov-buf-samba4.so (0x00007f766bbee000)
        libmsrpc3-samba4.so => /xsys/pkg/samba-4.11.11/lib/private/libmsrpc3-samba4.so (0x00007f766b9c8000)
        libnetapi.so.0 => /xsys/pkg/samba-4.11.11/lib/libnetapi.so.0 (0x00007f766b748000)
        libinterfaces-samba4.so => /xsys/pkg/samba-4.11.11/lib/private/libinterfaces-samba4.so (0x00007f766b544000)
        libdfs-server-ad-samba4.so => /xsys/pkg/samba-4.11.11/lib/private/libdfs-server-ad-samba4.so (0x00007f766b33d000)
        libCHARSET3-samba4.so => /xsys/pkg/samba-4.11.11/lib/private/libCHARSET3-samba4.so (0x00007f766b139000)
        libsamba-cluster-support-samba4.so => /xsys/pkg/samba-4.11.11/lib/private/libsamba-cluster-support-samba4.so (0x00007f766af36000)
        libsamdb.so.0 => /xsys/pkg/samba-4.11.11/lib/libsamdb.so.0 (0x00007f766ad1a000)
        libdcerpc-samba-samba4.so => /xsys/pkg/samba-4.11.11/lib/private/libdcerpc-samba-samba4.so (0x00007f766a98d000)
        libutil-tdb-samba4.so => /xsys/pkg/samba-4.11.11/lib/private/libutil-tdb-samba4.so (0x00007f766a789000)
        libcli-ldap-common-samba4.so => /xsys/pkg/samba-4.11.11/lib/private/libcli-ldap-common-samba4.so (0x00007f766a57f000)
        libasn1util-samba4.so => /xsys/pkg/samba-4.11.11/lib/private/libasn1util-samba4.so (0x00007f766a378000)
        libkrb5-samba4.so.26 => /xsys/pkg/samba-4.11.11/lib/private/libkrb5-samba4.so.26 (0x00007f766a0f7000)
        libutil-cmdline-samba4.so => /xsys/pkg/samba-4.11.11/lib/private/libutil-cmdline-samba4.so (0x00007f7669ef1000)
        libgse-samba4.so => /xsys/pkg/samba-4.11.11/lib/private/libgse-samba4.so (0x00007f7669cc3000)
        libaddns-samba4.so => /xsys/pkg/samba-4.11.11/lib/private/libaddns-samba4.so (0x00007f7669ab6000)
        libcli-smb-common-samba4.so => /xsys/pkg/samba-4.11.11/lib/private/libcli-smb-common-samba4.so (0x00007f7669879000)
        libgensec-samba4.so => /xsys/pkg/samba-4.11.11/lib/private/libgensec-samba4.so (0x00007f7669642000)
        libcli-cldap-samba4.so => /xsys/pkg/samba-4.11.11/lib/private/libcli-cldap-samba4.so (0x00007f7669438000)
        libtdb-wrap-samba4.so => /xsys/pkg/samba-4.11.11/lib/private/libtdb-wrap-samba4.so (0x00007f7669235000)
        libndr-standard.so.0 => /xsys/pkg/samba-4.11.11/lib/libndr-standard.so.0 (0x00007f7668b56000)
        libndr-nbt.so.0 => /xsys/pkg/samba-4.11.11/lib/libndr-nbt.so.0 (0x00007f7668920000)
        libasn1-samba4.so.8 => /xsys/pkg/samba-4.11.11/lib/private/libasn1-samba4.so.8 (0x00007f7668679000)
        libcom_err-samba4.so.0 => /xsys/pkg/samba-4.11.11/lib/private/libcom_err-samba4.so.0 (0x00007f7668476000)
        libmsghdr-samba4.so => /xsys/pkg/samba-4.11.11/lib/private/libmsghdr-samba4.so (0x00007f7668273000)
        libcli-spoolss-samba4.so => /xsys/pkg/samba-4.11.11/lib/private/libcli-spoolss-samba4.so (0x00007f766806b000)
        libutil-reg-samba4.so => /xsys/pkg/samba-4.11.11/lib/private/libutil-reg-samba4.so (0x00007f7667e68000)
        libsmbd-shim-samba4.so => /xsys/pkg/samba-4.11.11/lib/private/libsmbd-shim-samba4.so (0x00007f7667c65000)
        libroken-samba4.so.19 => /xsys/pkg/samba-4.11.11/lib/private/libroken-samba4.so.19 (0x00007f7667a55000)
        libevents-samba4.so => /xsys/pkg/samba-4.11.11/lib/private/libevents-samba4.so (0x00007f7667853000)
        libwind-samba4.so.0 => /xsys/pkg/samba-4.11.11/lib/private/libwind-samba4.so.0 (0x00007f766762a000)
        libhcrypto-samba4.so.5 => /xsys/pkg/samba-4.11.11/lib/private/libhcrypto-samba4.so.5 (0x00007f76673e4000)
        libsamba-hostconfig.so.0 => /xsys/pkg/samba-4.11.11/lib/libsamba-hostconfig.so.0 (0x00007f76671b1000)
        liblibcli-netlogon3-samba4.so => /xsys/pkg/samba-4.11.11/lib/private/liblibcli-netlogon3-samba4.so (0x00007f7666fa8000)
        libMESSAGING-samba4.so => /xsys/pkg/samba-4.11.11/lib/private/libMESSAGING-samba4.so (0x00007f7666d9e000)
        liblibcli-lsa3-samba4.so => /xsys/pkg/samba-4.11.11/lib/private/liblibcli-lsa3-samba4.so (0x00007f7666b99000)
        libsamba-credentials.so.0 => /xsys/pkg/samba-4.11.11/lib/libsamba-credentials.so.0 (0x00007f7666983000)
        libads-samba4.so => /xsys/pkg/samba-4.11.11/lib/private/libads-samba4.so (0x00007f7666752000)
        libauth4-samba4.so => /xsys/pkg/samba-4.11.11/lib/private/libauth4-samba4.so (0x00007f7666538000)
        libMESSAGING-SEND-samba4.so => /xsys/pkg/samba-4.11.11/lib/private/libMESSAGING-SEND-samba4.so (0x00007f7666335000)
        libsmbldaphelper-samba4.so => /xsys/pkg/samba-4.11.11/lib/private/libsmbldaphelper-samba4.so (0x00007f766612f000)
        libldbsamba-samba4.so => /xsys/pkg/samba-4.11.11/lib/private/libldbsamba-samba4.so (0x00007f7665efb000)
        libsmbldap.so.2 => /xsys/pkg/samba-4.11.11/lib/libsmbldap.so.2 (0x00007f7665cee000)
        libsecrets3-samba4.so => /xsys/pkg/samba-4.11.11/lib/private/libsecrets3-samba4.so (0x00007f7665ad0000)
        libflag-mapping-samba4.so => /xsys/pkg/samba-4.11.11/lib/private/libflag-mapping-samba4.so (0x00007f76658cd000)
        libwbclient.so.0 => /xsys/pkg/samba-4.11.11/lib/libwbclient.so.0 (0x00007f76656bb000)
        libsamdb-common-samba4.so => /xsys/pkg/samba-4.11.11/lib/private/libsamdb-common-samba4.so (0x00007f7665488000)
        libdcerpc-binding.so.0 => /xsys/pkg/samba-4.11.11/lib/libdcerpc-binding.so.0 (0x00007f766525d000)
        libndr-samba4.so => /xsys/pkg/samba-4.11.11/lib/private/libndr-samba4.so (0x00007f7664e2b000)
        libauthkrb5-samba4.so => /xsys/pkg/samba-4.11.11/lib/private/libauthkrb5-samba4.so (0x00007f7664c10000)
        libldb.so.2 => /xsys/pkg/samba-4.11.11/lib/private/libldb.so.2 (0x00007f76649d2000)
        libhx509-samba4.so.5 => /xsys/pkg/samba-4.11.11/lib/private/libhx509-samba4.so.5 (0x00007f766477f000)
        libheimbase-samba4.so.1 => /xsys/pkg/samba-4.11.11/lib/private/libheimbase-samba4.so.1 (0x00007f766457a000)
        libclidns-samba4.so => /xsys/pkg/samba-4.11.11/lib/private/libclidns-samba4.so (0x00007f7664374000)
        libsmb-transport-samba4.so => /xsys/pkg/samba-4.11.11/lib/private/libsmb-transport-samba4.so (0x00007f766416e000)
        libsamba-modules-samba4.so => /xsys/pkg/samba-4.11.11/lib/private/libsamba-modules-samba4.so (0x00007f7663f6a000)
        libcli-ldap-samba4.so => /xsys/pkg/samba-4.11.11/lib/private/libcli-ldap-samba4.so (0x00007f7663d54000)
        libserver-role-samba4.so => /xsys/pkg/samba-4.11.11/lib/private/libserver-role-samba4.so (0x00007f7663b51000)
        libdcerpc.so.0 => /xsys/pkg/samba-4.11.11/lib/libdcerpc.so.0 (0x00007f7663918000)
        libcluster-samba4.so => /xsys/pkg/samba-4.11.11/lib/private/libcluster-samba4.so (0x00007f7663715000)
        libtrusts-util-samba4.so => /xsys/pkg/samba-4.11.11/lib/private/libtrusts-util-samba4.so (0x00007f766350e000)
        libdcerpc-samba4.so => /xsys/pkg/samba-4.11.11/lib/private/libdcerpc-samba4.so (0x00007f76632f6000)
        libauth-unix-token-samba4.so => /xsys/pkg/samba-4.11.11/lib/private/libauth-unix-token-samba4.so (0x00007f76630f2000)
        libLIBWBCLIENT-OLD-samba4.so => /xsys/pkg/samba-4.11.11/lib/private/libLIBWBCLIENT-OLD-samba4.so (0x00007f7662eec000)
        libwinbind-client-samba4.so => /xsys/pkg/samba-4.11.11/lib/private/libwinbind-client-samba4.so (0x00007f7662ce8000)
        libnetif-samba4.so => /xsys/pkg/samba-4.11.11/lib/private/libnetif-samba4.so (0x00007f7662ae3000)
        libcli-nbt-samba4.so => /xsys/pkg/samba-4.11.11/lib/private/libcli-nbt-samba4.so (0x00007f76628d7000)
        libsmbclient-raw-samba4.so => /xsys/pkg/samba-4.11.11/lib/private/libsmbclient-raw-samba4.so (0x00007f7662689000)
        libhttp-samba4.so => /xsys/pkg/samba-4.11.11/lib/private/libhttp-samba4.so (0x00007f766247f000)
        libjansson.so.4 => /lib64/libjansson.so.4 (0x00007f7662272000)
        libgnutls.so.30 => /xsys/lib64/libgnutls.so.30 (0x00007f7661f36000)
        libcrypto.so.1.0.0 => /xsys/lib64/libcrypto.so.1.0.0 (0x00007f7661ae5000)
        libcap.so.2 => /lib64/libcap.so.2 (0x00007f76618e0000)
        libcups.so.2 => /lib64/libcups.so.2 (0x00007f7661677000)
        libacl.so.1 => /lib64/libacl.so.1 (0x00007f766146e000)
        liblber-2.4.so.2 => /lib64/liblber-2.4.so.2 (0x00007f766125f000)
        libldap-2.4.so.2 => /lib64/libldap-2.4.so.2 (0x00007f766100a000)
        libz.so.1 => /xsys/lib64/libz.so.1 (0x00007f7660def000)
        libnsl.so.1 => /lib64/libnsl.so.1 (0x00007f7660bd5000)
        libutil.so.1 => /lib64/libutil.so.1 (0x00007f76609d2000)
        libresolv.so.2 => /lib64/libresolv.so.2 (0x00007f76607b8000)
        libpam.so.0 => /lib64/libpam.so.0 (0x00007f76605a9000)
        libsystemd-daemon.so.0 => /lib64/libsystemd-daemon.so.0 (0x00007f76603a2000)
        libdl.so.2 => /lib64/libdl.so.2 (0x00007f766019e000)
        libsystemd-journal.so.0 => /lib64/libsystemd-journal.so.0 (0x00007f765ff79000)
        libcrypt.so.1 => /lib64/libcrypt.so.1 (0x00007f765fd42000)
        libiconv.so.2 => /xsys/lib64/libiconv.so.2 (0x00007f765fa5c000)
        libpopt.so.0 => /lib64/libpopt.so.0 (0x00007f765f852000)
        libpthread.so.0 => /lib64/libpthread.so.0 (0x00007f765f636000)
        libc.so.6 => /lib64/libc.so.6 (0x00007f765f268000)
        /lib64/ld-linux-x86-64.so.2 (0x00007f7671714000)
        libp11-kit.so.0 => /lib64/libp11-kit.so.0 (0x00007f765ef39000)
        libtasn1.so.6 => /xsys/lib64/libtasn1.so.6 (0x00007f765ed22000)
        libnettle.so.6 => /xsys/lib64/libnettle.so.6 (0x00007f765eadf000)
        libhogweed.so.4 => /xsys/lib64/libhogweed.so.4 (0x00007f765e8a2000)
        libgmp.so.10 => /xsys/lib64/libgmp.so.10 (0x00007f765e62c000)
        libattr.so.1 => /lib64/libattr.so.1 (0x00007f765e427000)
        libgssapi_krb5.so.2 => /lib64/libgssapi_krb5.so.2 (0x00007f765e1da000)
        libkrb5.so.3 => /lib64/libkrb5.so.3 (0x00007f765def1000)
        libk5crypto.so.3 => /lib64/libk5crypto.so.3 (0x00007f765dcbe000)
        libcom_err.so.2 => /lib64/libcom_err.so.2 (0x00007f765daba000)
        libssl.so.10 => /lib64/libssl.so.10 (0x00007f765d848000)
        libcrypto.so.10 => /lib64/libcrypto.so.10 (0x00007f765d3e5000)
        libavahi-common.so.3 => /lib64/libavahi-common.so.3 (0x00007f765d1d8000)
        libavahi-client.so.3 => /lib64/libavahi-client.so.3 (0x00007f765cfc7000)
        libm.so.6 => /lib64/libm.so.6 (0x00007f765ccc5000)
        libsasl2.so.3 => /lib64/libsasl2.so.3 (0x00007f765caa8000)
        libssl3.so => /lib64/libssl3.so (0x00007f765c84f000)
        libsmime3.so => /lib64/libsmime3.so (0x00007f765c627000)
        libnss3.so => /lib64/libnss3.so (0x00007f765c2f8000)
        libnssutil3.so => /lib64/libnssutil3.so (0x00007f765c0c8000)
        libplds4.so => /lib64/libplds4.so (0x00007f765bec4000)
        libplc4.so => /lib64/libplc4.so (0x00007f765bcbf000)
        libnspr4.so => /lib64/libnspr4.so (0x00007f765ba81000)
        libaudit.so.1 => /lib64/libaudit.so.1 (0x00007f765b858000)
        librt.so.1 => /lib64/librt.so.1 (0x00007f765b650000)
        libdw.so.1 => /lib64/libdw.so.1 (0x00007f765b3ff000)
        libgcc_s.so.1 => /lib64/libgcc_s.so.1 (0x00007f765b1e9000)
        libselinux.so.1 => /lib64/libselinux.so.1 (0x00007f765afc2000)
        liblzma.so.5 => /lib64/liblzma.so.5 (0x00007f765ad9c000)
        liblz4.so.1 => /lib64/liblz4.so.1 (0x00007f765ab87000)
        libgcrypt.so.11 => /lib64/libgcrypt.so.11 (0x00007f765a906000)
        libgpg-error.so.0 => /lib64/libgpg-error.so.0 (0x00007f765a701000)
        libfreebl3.so => /lib64/libfreebl3.so (0x00007f765a4fe000)
        libffi.so.6 => /lib64/libffi.so.6 (0x00007f765a2f6000)
        libkrb5support.so.0 => /lib64/libkrb5support.so.0 (0x00007f765a0e6000)
        libkeyutils.so.1 => /lib64/libkeyutils.so.1 (0x00007f7659ee2000)
        libdbus-1.so.3 => /lib64/libdbus-1.so.3 (0x00007f7659c92000)
        libcap-ng.so.0 => /lib64/libcap-ng.so.0 (0x00007f7659a8c000)
        libelf.so.1 => /lib64/libelf.so.1 (0x00007f7659874000)
        libbz2.so.1 => /lib64/libbz2.so.1 (0x00007f7659664000)
        libpcre.so.1 => /xsys/lib64/libpcre.so.1 (0x00007f7659446000)
        libsystemd.so.0 => /lib64/libsystemd.so.0 (0x00007f7659215000)
Comment 1 Jason Keltz 2020-09-18 15:26:04 UTC
Hi.
Is there any additional testing I can do to help resolve this?