Bug when forwarding Kerberos credentials to the server?

[Jaap Winius]

Hi folks,

While testing a free NoMachine_6.4.6_1_amd64.deb version in a Kerberos SSO environment, I noticed that once the user had logged into the target desktop machine that there seemed to be no Kerberos credentials file. Only, there was one, but that the $KRB5CCNAME environment variable was not being set for some reason, possibly because nxd was also caching too many old versions of this file that no longer existed. So, I came up with this little workaround that I placed in the server’s /etc/profile:

export IDNO=”$(/usr/bin/id -u)”

for i in $(ls /tmp/krb5cc_${IDNO}_*)

do

if [ -f $i ]

then

export KRB5CCNAME=$i

fi

done

 

Cheers,

Jaap

[Guro]

Hello

Did you use ‘password’ or ‘kerberos’ authentication?

And could you send client session and server debug logs to us? You can attach them here or submit the to forum[at]nomachine[dot]com.

Instruction to take logs are here: https://www.nomachine.com/DT10O00163

Thank You.

 

[Author]

Posts