Uploaded image for project: 'RHEL'
  1. RHEL
  2. RHEL-22301

cepces spnego auth doesn't work when executed by certmonger

    • Icon: Bug Bug
    • Resolution: Done-Errata
    • Icon: Critical Critical
    • rhel-9.4
    • rhel-9.4
    • cepces
    • cepces-0.3.8-4.el9
    • None
    • None
    • rhel-sst-idm-sssd
    • ssg_idm
    • 0
    • QE ack, Dev ack
    • False
    • Hide

      None

      Show
      None
    • None
    • None
    • Hide
      1. Edit /etc/cepces/cepces.conf and set the correct server
      2. Set kerberos method = secrets and keytab
      3. Create a keytab with: net ads keytab create
      4. journalctl -f -u certmonger
      5. systemctl restart certmonger <<< should not show any errors
      Show
      Edit /etc/cepces/cepces.conf and set the correct server Set kerberos method = secrets and keytab Create a keytab with: net ads keytab create journalctl -f -u certmonger systemctl restart certmonger <<< should not show any errors
    • Pass
    • RegressionOnly
    • None

      cepces-submit fails to authenticate with SPNEGO (Kerberos) when executed directly by certmonger.

      If you do a certmonger restart it directly throws an exception connecting to the CEP endpoint.

              anschnei@redhat.com Andreas Schneider
              anschnei@redhat.com Andreas Schneider
              asn@redhat.com asn@redhat.com (Inactive)
              Denis Karpelevich Denis Karpelevich
              Marc Muehlfeld Marc Muehlfeld
              Votes:
              0 Vote for this issue
              Watchers:
              7 Start watching this issue

                Created:
                Updated:
                Resolved: