On 24. 06. 24 19:38, Stephen Gallagher wrote:
On Mon, Jun 24, 2024 at 1:30 PM Miro Hrončok <mhroncok@xxxxxxxxxx> wrote:
On 24. 06. 24 19:13, Kevin Fenzi wrote:
tickets are valid for 24hours and can be renewed for 1 week. (Either via
gnome online accounts or just 'kinit -R')
How do I do that?
$ fkinit
... all good ...
later:
$ klist
Ticket cache: KCM:1000:.....
Default principal: churchyard@xxxxxxxxxxxxxxxxx
Valid starting Expires Service principal
24.6.2024 15:42:35 25.6.2024 15:42:21 krbtgt/FEDORAPROJECT.ORG@xxxxxxxxxxxxxxxxx
24.6.2024 15:42:41 25.6.2024 15:42:21
HTTP/koji.fedoraproject.org@xxxxxxxxxxxxxxxxx
$ kinit -R
kinit: KDC can't fulfill requested option while renewing credentials
$ kinit -R churchyard@xxxxxxxxxxxxxxxxx
kinit: KDC can't fulfill requested option while renewing credentials
Seems like a bug on your end; I just tested it on my end and it worked
just fine. Maybe your kerberos configuration is out of date? It's
changed a few times over the years and if you ever made any manual
edits, they may be overriding newer RPM content.
I had some custom configuration in /etc/krb5.conf [libdefaults] to make
(IPA.)REDHAT.COM work for centos stream builds.
I moved everything related to that to /etc/krb5.conf.d/ipa_redhat_com and out
of [libdefaults].
Now I can run kinit -R churchyard@xxxxxxxxxxxxxxxxx.
Hopefully I can still login to internal stuff.
Thanks.
--
Miro Hrončok
--
Phone: +420777974800
Fedora Matrix: mhroncok
--
_______________________________________________
devel mailing list -- devel@xxxxxxxxxxxxxxxxxxxxxxx
To unsubscribe send an email to devel-leave@xxxxxxxxxxxxxxxxxxxxxxx
Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: https://lists.fedoraproject.org/archives/list/devel@xxxxxxxxxxxxxxxxxxxxxxx
Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue
