Bug 15840 - kinit command is failing with Missing cache Error
Summary: kinit command is failing with Missing cache Error
Status: NEW
Alias: None
Product: Samba 4.1 and newer
Classification: Unclassified
Component: Other (show other bugs)
Version: 4.21.2
Hardware: All Linux
: P5 normal (vote)
Target Milestone: ---
Assignee: Samba QA Contact
QA Contact: Samba QA Contact
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2025-03-25 09:41 UTC by vivekanand.devworks
Modified: 2025-03-26 00:28 UTC (History)
3 users (show)

See Also:


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description vivekanand.devworks 2025-03-25 09:41:54 UTC
We are using Samba in our application and after upgrading to samba version 4.21.2 from 4.17.7 we have observed that kinit command is failing.
Command :
net ads kerberos kinit -d 10  -U "Username"
Error :
kerberos_kinit_password_ext: Missing ccache for "account" and config [(null)]
failed to kinit password: NT code 0x000055da

After analysing the code we found out that commit id  
d49de77 - s3:libads: let kerberos_kinit_password_ext() require an explicit krb5 ccache
had introduced the changes to use an explicit ccache but if we see the code in file 
source3/utils/net_ads.c which is calling   kerberos_kinit_password_ext() is still sending NULL which is resulting into this failure.

 Code:
ret = kerberos_kinit_password_ext(principal,
 password,
 0,
 NULL,
 NULL,
 NULL,
 true,
 true,
 2592000, /* one month */
 NULL,
 NULL,
 NULL,
 &status);

Please have a look into this issue.