Kerberos tickets disappearing after installing NoMachine?

Forum / NoMachine for Linux / Kerberos tickets disappearing after installing NoMachine?

Tagged: 

Viewing 5 posts - 1 through 5 (of 5 total)
  • Author
    Posts
  • #18293
    valan
    Participant

    Hi

    We have Ubuntu Mate 16.04, 18.04 on some computers

    We are losing Kerberos tickets after installing NoMachine 6.1.6 — up to 2 or 3 times per a day.

    After deinstalling NoMachine, tickets stop disappearing

    valan@valan:~$ klist

    Ticket cache: FILE:/tmp/krb5cc_10023_oN9LfA

    Default principal: valan@AAA.AAA

    Valid starting Expires Service principal

    03.05.2018 12:55:39 03.05.2018 22:55:39 krbtgt/AAA.AAA@AAA.AAA

    renew until 04.05.2018 12:55:22

    valan@valan:~$

    valan@valan:~$ sudo service nxserver stop

    valan@valan:~$

    valan@valan:~$ klist

    klist: No credentials cache found (filename: /tmp/krb5cc_10023_oN9LfA)

    valan@valan:~$

    #18308
    Guro
    Contributor

    Hello

    Did you notice whether Kerberos tickets are getting lost on both OSes( mate 16.04 and ubuntu ?18.04).

    Are all OSes in the same kerberos REALM? Are they in the same domain?

    #18320
    valan
    Participant

    Hello.
    Thank you for your response.
    Ok, here’s more details.

    We have one AD domain. It is 5 Domain Controllers based on Ubuntu Server 16.04 + Samba 4 from standard repositories.in this domain

    (it was installed by manuals:

    Create an Active Directory Infrastructure with Samba4 on Ubuntu – Part 1


    https://www.tecmint.com/join-additional-ubuntu-dc-to-samba4-ad-dc-failover-replication/ )

    One Kerberos realm.
    Ubuntu Mate 16.04, Ubuntu Mate 18.04 was joined with this domain by this manual: https://www.tecmint.com/join-ubuntu-to-active-directory-domain-member-samba-winbind/

    This workstations get internet access throw squid proxy server.
    SQUID was configured to use Kerberos tickets to get access rights.
    When NX erase tickets, user lost internet access — browsers reports him «access denied».

    Users lost access to samba shares, printers, databases in this moments too.

    Klist show empty tickets list in this case.
    We are lost tickets only on machines with NoMachine NX server installed.
    I’ve tried around 10 computers — users get «ticket lost» on all of them.
    I can not pinpoint all the situations when tickets are lost.
    When the NX server stops, the tickets disappear in 100% of cases.
    Often (10%) ticket disappears immediately after the user logs in. If I put the browser into autorun for user then tickets are lost less often.
    In which situation the user loses a ticket during the day, it is still difficult for me to determine. I can only record the fact and the approximate time of the incident.
    Thanks a lot.

    #19096
    Guro
    Contributor

    Hello.

    This bug was described as TR and solution released with NoMachine 6.2.4 version.
    Please update your NoMachine installation.

    Sorry, for late answer.

    #19617
    Britgirl
    Keymaster

    This is the relevant TR for this bug report, now fixed.

    https://www.nomachine.com/TR05P08562

Viewing 5 posts - 1 through 5 (of 5 total)

This topic was marked as solved, you can't post.