Bug 224510

Summary: Kerberos service does not start
Product: [openSUSE] openSUSE 10.2 Reporter: Pavol Rusnak <prusnak>
Component: YaST2Assignee: Jiří Suchomel <jsuchome>
Status: RESOLVED FIXED QA Contact: Jiri Srain <jsrain>
Severity: Major    
Priority: P5 - None CC: aj, mc
Version: RC 3   
Target Milestone: ---   
Hardware: x86-64   
OS: Other   
Whiteboard:
Found By: Development Services Priority:
Business Priority: Blocker: ---
Marketing QA Status: --- IT Deployment: ---
Attachments: logs from save_y2logs

Description Pavol Rusnak 2006-11-29 15:16:00 UTC
Kerberos service does not start after I have chosen "Use Kerberos" in Yast2 - Kerberos Client. File /etc/krb5.conf IS modified and filled with correct info.
Comment 1 Pavol Rusnak 2006-11-29 15:16:48 UTC
Created attachment 107411 [details]
logs from save_y2logs
Comment 2 Jiří Suchomel 2006-11-29 15:18:22 UTC
What does 'pam-config -q --krb5' say?
Comment 3 Jiří Suchomel 2006-11-29 15:30:31 UTC
Thorsten, pam-config reports:

spectra:~ # pam-config -a --krb5
ERROR: module /lib/security/pam_krb5.so is not installed.

The machine has pam_krb5.so in /lib64/security/pam_krb5.so
pam_krb5-32bit
What's the correct solution? Should pam-config use /lib64/security/pam_krb5.so or should I install pam_krb5-32bit by yast2-kerberos-client?
Comment 4 Jiří Suchomel 2006-11-29 15:43:24 UTC
Looks like pam_krb5-32bit needs to be installed, like "pam_ldap-32bit" from bug 64808....
Comment 5 Jiří Suchomel 2006-11-29 15:48:21 UTC
(Another relevant bug is 164313)

Olaf, is it correct to install pam_krb5-64bit for ppc64?
Comment 6 Jiří Suchomel 2006-11-29 15:57:27 UTC
Pavol, fixed yast2-kerberos-client is at /home/jsuchome/Export/yast2/rpms/10.2, could you test it?
Comment 7 Thorsten Kukuk 2006-11-29 16:04:15 UTC
If you have a biarch system, you need the 32bit and the 64bit libraries, since we ship 32bit and 64bit applications which needs this plugins.
So the /lib/security/pam_krb5.so is not installed check is correct.
You can override it with the --force flag, but I don't think that's a good idea.
Comment 8 Jiří Suchomel 2006-11-29 16:15:53 UTC
Submited as yast2-kerberos-client-2.14.5
These packages are installed for various architectures:

"ia64"         : [ "krb5-x86", "pam_krb5-x86" ],
"ppc64"        : [ "krb5-64bit", "pam_krb5-64bit" ],
"s390_64"      : [ "krb5-32bit", "pam_krb5-32bit" ],
"x86_64"       : [ "krb5-32bit", "pam_krb5-32bit" ]
Comment 9 Pavol Rusnak 2006-11-29 16:16:30 UTC
I have uninstalled both pam_krb5 and pam_krb5-32bit, updated
yast2-kerberos-client and now when I run Kerberos Client configuration in Yast2
both packages are installed.
Comment 10 Jiří Suchomel 2006-11-29 16:18:12 UTC
Thanks for report & testing.