"default_ccache_name = FILE:/home/%{username}/krb5cc"
That's not a default nor a configuration that anyone routinely uses. It
will likely play merry hell with daemons such as sssd and winbind that
try to centrally refresh Kerberos tickets, on a system.
However, it might and probably will work but that might require all
Ubuntu Kerberos related stuff to make a fundamental change from upstream
and routine defaults.
Best to fix the snap's issues (whatever they are) rather than the tail
wagging the dog.
--
You received this bug notification because you are a member of Desktop
Packages, which is subscribed to firefox in Ubuntu.
https://bugs.launchpad.net/bugs/2042859
Title:
[snap] Firefox snap cannot use kerberos authentication
Status in firefox package in Ubuntu:
Confirmed
Bug description:
Applies to Ubuntu 22.04 and any other versions where firefox runs as snap:
firefox:
Installed: 1:1snap1-0ubuntu2
Candidate: 1:1snap1-0ubuntu2
Version table:
*** 1:1snap1-0ubuntu2 500
500 http://us.archive.ubuntu.com/ubuntu jammy/main amd64 Packages
100 /var/lib/dpkg/statu
You can configure Firefox to use negotiate authentication with kerberos.
https://people.redhat.com/mikeb/negotiate/ on how to do this.
To use kerberos auth, Firefox needs to read kerberos ticket cache, default
to /tmp/krb5cc_${id -u}. Since Firefox runs as a snap in 22.04, and possibly
other versions, it cannot read this cache, and thus cannot use kerberized
authentication.
Firefox installed as native application works as expected.
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/firefox/+bug/2042859/+subscriptions
--
Mailing list: https://launchpad.net/~desktop-packages
Post to : [email protected]
Unsubscribe : https://launchpad.net/~desktop-packages
More help : https://help.launchpad.net/ListHelp
