Package: krb5-user Version: 1.15-1.2 Severity: wishlist Dear Maintainer,
* What led up to the situation? I'm running a road warrior setup and authenticate via KDCProxy. If the package krb5-ktls is not installed authentication fails: # KRB5_TRACE=/dev/stderr kinit admin [12904] 1516167827.841029: Getting initial credentials for admin at EXAMPLE.ORG [12904] 1516167827.845059: Sending request (169 bytes) to EXAMPLE.ORG [12904] 1516167827.845173: Resolving hostname kdcproxy.example.org [12904] 1516167828.115087: Terminating TCP connection to https 89.0.xx.yy:443 [12904] 1516167828.551801: Terminating TCP connection to https 2a0a:a541:57ed:0:216:[redacted]:443 kinit: Cannot contact any KDC for realm EXAMPLE.ORG' while getting initial credentials * What exactly did you do (or not do) that was effective (or ineffective)? After installation of krb5-k5tls authentication succeded. I've discussed with upstream and there will be better logs added: http://mailman.mit.edu/pipermail/kerberos/2018-January/021913.html There was also the suggestion to either add a recommends/depends to krb5-k5tls to krb5-user or maybe to integrate it in libkrb5 as CentOS does. Better logging will be fine for me - this bug is to discuss possible packaging changes (recommends/depends or integration into libkrb5). Feel free to close the bug if you think packaging is fine and there is no change needed. -- System Information: Debian Release: 9.3 APT prefers stable-updates APT policy: (500, 'stable-updates'), (500, 'stable') Architecture: amd64 (x86_64) Kernel: Linux 4.9.0-4-amd64 (SMP w/4 CPU cores) Locale: LANG=de_DE.UTF-8, LC_CTYPE=de_DE.UTF-8 (charmap=UTF-8), LANGUAGE=de_DE.UTF-8 (charmap=UTF-8) Shell: /bin/sh linked to /bin/dash Init: systemd (via /run/systemd/system) Versions of packages krb5-user depends on: ii krb5-config 2.6 ii libc6 2.24-11+deb9u1 ii libcomerr2 1.43.4-2 ii libgssapi-krb5-2 1.15-1.2 ii libgssrpc4 1.15-1.2 ii libk5crypto3 1.15-1.2 ii libkadm5clnt-mit11 1.15-1.2 ii libkadm5srv-mit11 1.15-1.2 ii libkdb5-8 1.15-1.2 ii libkeyutils1 1.5.9-9 ii libkrb5-3 1.15-1.2 ii libkrb5support0 1.15-1.2 ii libss2 1.43.4-2 krb5-user recommends no packages. krb5-user suggests no packages. -- no debconf information