Kerberos tickets disappearing after installing NoMachine?

[valan]

Hi

We have Ubuntu Mate 16.04, 18.04 on some computers

We are losing Kerberos tickets after installing NoMachine 6.1.6 — up to 2 or 3 times per a day.

After deinstalling NoMachine, tickets stop disappearing

valan@valan:~$ klist

Ticket cache: FILE:/tmp/krb5cc_10023_oN9LfA

Default principal: valan@AAA.AAA

Valid starting Expires Service principal

03.05.2018 12:55:39 03.05.2018 22:55:39 krbtgt/AAA.AAA@AAA.AAA

renew until 04.05.2018 12:55:22

valan@valan:~$

valan@valan:~$ sudo service nxserver stop

valan@valan:~$

valan@valan:~$ klist

klist: No credentials cache found (filename: /tmp/krb5cc_10023_oN9LfA)

valan@valan:~$

[Guro]

Hello

Did you notice whether Kerberos tickets are getting lost on both OSes( mate 16.04 and ubuntu ?18.04).

Are all OSes in the same kerberos REALM? Are they in the same domain?

[valan]

Hello.
Thank you for your response.
Ok, here’s more details.

We have one AD domain. It is 5 Domain Controllers based on Ubuntu Server 16.04 + Samba 4 from standard repositories.in this domain

(it was installed by manuals:
https://www.tecmint.com/install-samba4-active-directory-ubuntu/
https://www.tecmint.com/join-additional-ubuntu-dc-to-samba4-ad-dc-failover-replication/ )

One Kerberos realm.
Ubuntu Mate 16.04, Ubuntu Mate 18.04 was joined with this domain by this manual: https://www.tecmint.com/join-ubuntu-to-active-directory-domain-member-samba-winbind/

This workstations get internet access throw squid proxy server.
SQUID was configured to use Kerberos tickets to get access rights.
When NX erase tickets, user lost internet access — browsers reports him «access denied».

Users lost access to samba shares, printers, databases in this moments too.

Klist show empty tickets list in this case.
We are lost tickets only on machines with NoMachine NX server installed.
I’ve tried around 10 computers — users get «ticket lost» on all of them.
I can not pinpoint all the situations when tickets are lost.
When the NX server stops, the tickets disappear in 100% of cases.
Often (10%) ticket disappears immediately after the user logs in. If I put the browser into autorun for user then tickets are lost less often.
In which situation the user loses a ticket during the day, it is still difficult for me to determine. I can only record the fact and the approximate time of the incident.
Thanks a lot.

[Guro]

Hello.

This bug was described as TR and solution released with NoMachine 6.2.4 version.
Please update your NoMachine installation.

Sorry, for late answer.

[Britgirl]

This is the relevant TR for this bug report, now fixed.

https://www.nomachine.com/TR05P08562

[Author]

Posts