GNOME Bugzilla – Bug 737902
GOA loses FreeIPA Kerberos credentials periodically with "Failed to find an identity"
Last modified: 2017-04-19 12:15:16 UTC
I'm running Fedora 21, GNOME 3.14 (this has been happening for a while so I won't be more specific than that) against a Fedora 19 FreeIPA server. The system was set up with ipa-client-install, so it has SSSD and everything, and when I log in to GNOME, my Kerberos ticket is issued and handled. Every so often, it seems like GOA loses it: Oct 03 10:07:13 adam.happyassassin.net org.gnome.OnlineAccounts[2244]: (goa-daemon:2592): GLib-GIO-WARNING **: gdbusobjectmanagerclient.c:1586: Processing InterfaceRemoved signal for path /org/gnome/Identity/Identities/adamw_40_HAPPYASSASSIN_2e_NET but no object proxy exists Oct 03 10:07:13 adam.happyassassin.net org.gnome.OnlineAccounts[2244]: goa-daemon-Message: /org/gnome/OnlineAccounts/Accounts/account_1412088631_0: Setting AttentionNeeded to TRUE because EnsureCredentials() failed with: Failed to find an identity (goa-error-quark, 4) Then a while later, it gets it back: Oct 03 10:26:06 adam.happyassassin.net org.gnome.OnlineAccounts[2244]: goa-daemon-Message: /org/gnome/OnlineAccounts/Accounts/account_1412088631_0: Setting AttentionNeeded to FALSE because EnsureCredentials() succeded I don't think there's any specific action that triggers this. There's nothing that always shows up in the logs at the same time as the 'InterfaceRemoved' line, for instance. What causes me to notice it, *without fail*, is that some time later I compose a long email in Evolution and try to send it and Evolution crashes because that's what it does when it's set to use GSSAPI but GNOME has lost the Kerberos identity in this way, and it's driving me freaking crazy (I'll file the Evo bug too, as it obviously shouldn't crash).
Still seeing something along these lines with gnome-online-accounts-3.15.3-1.fc22.x86_64: Jan 22 15:25:57 adam.happyassassin.net org.gnome.OnlineAccounts[2227]: goa-daemon-Message: /org/gnome/OnlineAccounts/Accounts/account_1420594800_0: Setting AttentionNeeded to TRUE because EnsureCredentials() failed with: Did not find password for principal ?adamw@HAPPYASSASSIN.NET? in credentials (goa-error-quark, 4) Jan 22 15:26:07 adam.happyassassin.net org.gnome.OnlineAccounts[2227]: (goa-daemon:2540): GLib-GIO-WARNING **: gdbusobjectmanagerclient.c:1586: Processing InterfaceRemoved signal for path /org/gnome/Identity/Identities/adamw_40_HAPPYASSASSIN_2e_NET but no object proxy exists ... Jan 22 15:36:30 adam.happyassassin.net org.gnome.OnlineAccounts[2227]: goa-daemon-Message: /org/gnome/OnlineAccounts/Accounts/account_1420594800_0: Setting AttentionNeeded to FALSE because EnsureCredentials() succeded it seems to have happened five times in the last two weeks.
Adam, are you still experiencing this? We have had a ton of fixes to the Kerberos code in the past few releases. Fedora 24 or newer would be relevant.
I don't think I have, no...