Forum / NoMachine for Linux / Kerberos tickets disappearing after installing NoMachine?
Tagged: Kerberos
- This topic has 4 replies, 3 voices, and was last updated 6 years, 1 month ago by Britgirl.
-
AuthorPosts
-
May 3, 2018 at 15:29 #18293valanParticipant
Hi
We have Ubuntu Mate 16.04, 18.04 on some computers
We are losing Kerberos tickets after installing NoMachine 6.1.6 — up to 2 or 3 times per a day.
After deinstalling NoMachine, tickets stop disappearing
valan@valan:~$ klist
Ticket cache: FILE:/tmp/krb5cc_10023_oN9LfA
Default principal: valan@AAA.AAA
Valid starting Expires Service principal
03.05.2018 12:55:39 03.05.2018 22:55:39 krbtgt/AAA.AAA@AAA.AAA
renew until 04.05.2018 12:55:22
valan@valan:~$
valan@valan:~$ sudo service nxserver stop
valan@valan:~$
valan@valan:~$ klist
klist: No credentials cache found (filename: /tmp/krb5cc_10023_oN9LfA)
valan@valan:~$
May 7, 2018 at 10:11 #18308GuroContributorHello
Did you notice whether Kerberos tickets are getting lost on both OSes( mate 16.04 and ubuntu ?18.04).
Are all OSes in the same kerberos REALM? Are they in the same domain?
May 8, 2018 at 14:47 #18320valanParticipantHello.
Thank you for your response.
Ok, here’s more details.We have one AD domain. It is 5 Domain Controllers based on Ubuntu Server 16.04 + Samba 4 from standard repositories.in this domain
(it was installed by manuals:
Create an Active Directory Infrastructure with Samba4 on Ubuntu – Part 1
https://www.tecmint.com/join-additional-ubuntu-dc-to-samba4-ad-dc-failover-replication/ )One Kerberos realm.
Ubuntu Mate 16.04, Ubuntu Mate 18.04 was joined with this domain by this manual: https://www.tecmint.com/join-ubuntu-to-active-directory-domain-member-samba-winbind/This workstations get internet access throw squid proxy server.
SQUID was configured to use Kerberos tickets to get access rights.
When NX erase tickets, user lost internet access — browsers reports him «access denied».Users lost access to samba shares, printers, databases in this moments too.
Klist show empty tickets list in this case.
We are lost tickets only on machines with NoMachine NX server installed.
I’ve tried around 10 computers — users get «ticket lost» on all of them.
I can not pinpoint all the situations when tickets are lost.
When the NX server stops, the tickets disappear in 100% of cases.
Often (10%) ticket disappears immediately after the user logs in. If I put the browser into autorun for user then tickets are lost less often.
In which situation the user loses a ticket during the day, it is still difficult for me to determine. I can only record the fact and the approximate time of the incident.
Thanks a lot.July 24, 2018 at 14:29 #19096GuroContributorHello.
This bug was described as TR and solution released with NoMachine 6.2.4 version.
Please update your NoMachine installation.Sorry, for late answer.
September 14, 2018 at 13:26 #19617BritgirlKeymasterThis is the relevant TR for this bug report, now fixed.
-
AuthorPosts
This topic was marked as solved, you can't post.