GNOME Bugzilla – Bug 687962
Forgets Kerberos account
Last modified: 2012-11-13 16:10:42 UTC
GOA tends to forget that I have had Kerberos account created; when I create a new one, the password prompt even suggests a possibility of remembering the password, but it never materialized (I have never seen it reinit ticket automatically). Moreover, from time to time (mostly after some traumatic situation like a crash of gnome session or need to restart gdm.service by force) it completely forgets that the Kerberos account ever existed and I have to create a new one. I would hope, GOA would be able to least remember my Kerberos accounts (if not also remember the password for it, which would be even better).
See https://bugzilla.redhat.com/show_bug.cgi?id=874974 for more.
can you attach your ~/.config/goa-1.0/accounts.conf after adding the account?
See https://bugzilla.redhat.com/attachment.cgi?id=641800
GOA ignores your earlier account once your session is restarted because it treats Kerberos accounts as temporary accounts tied to the session in which it was created.
(only if you kinit, not if you use the control-center)
Hey Matej, that file only shows remanant bits from manual "kinit"s . They're harmless, and fixed by bug 688041. I don't see anything in the file showing accounts added with the control-center panel. Can you show the file after adding one using the panel?
(In reply to comment #6) > I don't see anything in the file showing accounts added with the control-center > panel. That's not correct ... when this file was generated I have used both kinit and control-center. So either control-center doesn't leave any trace or there is something else wrong with it. When I have removed (with [-] button) and added (Add online account button) Kerberos account, the only difference in the file is this: wycliff:gedit (review) $ diff -u ~/accounts.conf ~/.config/goa-1.0/accounts.conf --- /home/matej/accounts.conf 2012-11-12 23:10:26.767071396 +0100 +++ /home/matej/.config/goa-1.0/accounts.conf 2012-11-12 23:10:58.455052964 +0100 @@ -269,7 +269,7 @@ IsTemporary=true TicketingEnabled=true -[Account account_1352707316] +[Account account_1352758258] Provider=kerberos Identity=mcepl@REDHAT.COM PresentationIdentity=mcepl@REDHAT.COM
Created attachment 228840 [details] [review] kerberos: make newly added accounts permanent after successful login Explicitly added accounts start out temporary until they're successfully logged in. Once they are logged in, though, they need to be toggled to permanent. The code fails to do this. This commit toggles the permanance of an account once it's succesfully logged in.
Created attachment 228899 [details] [review] Rename goa_util_set_keyfile_boolean as goa_utils_keyfile_set_boolean
Created attachment 228900 [details] [review] kerberos: Use goa_utils_keyfile_set_boolean to set IsTemporary
Comment on attachment 228840 [details] [review] kerberos: make newly added accounts permanent after successful login Looks fine to me. However, for this to actually work, we need the other two patches. We can not set IsTemporary using the same function that deals with keys like MailEnabled, ChatEnabled, etc.. This is because they are the negations of their corresponding D-Bus properties, while IsTemporary is not.
Now it remembers the account, but not the tokens across sessions. Is this the behaviour that we want? Ray?
Works like a charm now. If you save your Kerberos password in the keyring and have the patch from bug 688018 , then it automatically gets you ticket on restarting the session.
Review of attachment 228900 [details] [review]: confusing, but looks right.
This problem has been fixed in our software repository. The fix will go into the next software release. Thank you for your bug report.