On 2.9.2019 14.28, Robert Senger wrote: > Package: sssd > Version: 1.16.3-3.1 > Severity: important > Tags: ipv6 > > Dear Maintainer, > > * What led up to the situation? > > Laptop with sssd and sssd-krb5 installed. Two wifi networks, one dual stack > ipv4/ipv6, other ipv6 only (with dns64/nat64). > > * What exactly did you do (or not do) that was effective (or > ineffective)? > > Laptop connects to dual stack netwotk. Kerberos authentication works, kdc is > reached via ipv4 (seen with tcpdump on the server). Laptop then switches to > ipv6 only network. Kerberos authentication fails, kinit reports kdc cannot be > contacted. > > * What was the outcome of this action? > > Kerberos authentication fails if ipv4 is initially available, and becomes > unavailable after switching networks. > > * What outcome did you expect instead? > > sssd should always try both address families, regardless of previous > availability. sssd should prefer ipv6 by default.
This is probably same as https://pagure.io/SSSD/sssd/issue/3973 ? fixed in 1.16.4/2.x -- t