After an evaluation, GNOME has moved from Bugzilla to GitLab. Learn more about GitLab.
No new issues can be reported in GNOME Bugzilla anymore.
To report an issue in a GNOME project, go to GNOME GitLab.
Do not go to GNOME Gitlab for: Bluefish, Doxygen, GnuCash, GStreamer, java-gnome, LDTP, NetworkManager, Tomboy.
Bug 737902 - GOA loses FreeIPA Kerberos credentials periodically with "Failed to find an identity"
GOA loses FreeIPA Kerberos credentials periodically with "Failed to find an i...
Status: RESOLVED FIXED
Product: gnome-online-accounts
Classification: Core
Component: Kerberos
3.14.x
Other Linux
: Normal major
: ---
Assigned To: GNOME Online Accounts maintainer(s)
GNOME Online Accounts maintainer(s)
Depends on:
Blocks:
 
 
Reported: 2014-10-04 19:54 UTC by Adam Williamson
Modified: 2017-04-19 12:15 UTC
See Also:
GNOME target: ---
GNOME version: ---



Description Adam Williamson 2014-10-04 19:54:40 UTC
I'm running Fedora 21, GNOME 3.14 (this has been happening for a while so I won't be more specific than that) against a Fedora 19 FreeIPA server. The system was set up with ipa-client-install, so it has SSSD and everything, and when I log in to GNOME, my Kerberos ticket is issued and handled.

Every so often, it seems like GOA loses it:

Oct 03 10:07:13 adam.happyassassin.net org.gnome.OnlineAccounts[2244]: (goa-daemon:2592): GLib-GIO-WARNING **: gdbusobjectmanagerclient.c:1586: Processing InterfaceRemoved signal for path /org/gnome/Identity/Identities/adamw_40_HAPPYASSASSIN_2e_NET but no object proxy exists
Oct 03 10:07:13 adam.happyassassin.net org.gnome.OnlineAccounts[2244]: goa-daemon-Message: /org/gnome/OnlineAccounts/Accounts/account_1412088631_0: Setting AttentionNeeded to TRUE because EnsureCredentials() failed with: Failed to find an identity (goa-error-quark, 4)

Then a while later, it gets it back:

Oct 03 10:26:06 adam.happyassassin.net org.gnome.OnlineAccounts[2244]: goa-daemon-Message: /org/gnome/OnlineAccounts/Accounts/account_1412088631_0: Setting AttentionNeeded to FALSE because EnsureCredentials() succeded

I don't think there's any specific action that triggers this. There's nothing that always shows up in the logs at the same time as the 'InterfaceRemoved' line, for instance. What causes me to notice it, *without fail*, is that some time later I compose a long email in Evolution and try to send it and Evolution crashes because that's what it does when it's set to use GSSAPI but GNOME has lost the Kerberos identity in this way, and it's driving me freaking crazy (I'll file the Evo bug too, as it obviously shouldn't crash).
Comment 1 Adam Williamson 2015-01-22 23:43:28 UTC
Still seeing something along these lines with gnome-online-accounts-3.15.3-1.fc22.x86_64:

Jan 22 15:25:57 adam.happyassassin.net org.gnome.OnlineAccounts[2227]: goa-daemon-Message: /org/gnome/OnlineAccounts/Accounts/account_1420594800_0: Setting AttentionNeeded to TRUE because EnsureCredentials() failed with: Did not find password for principal ?adamw@HAPPYASSASSIN.NET? in credentials (goa-error-quark, 4)
Jan 22 15:26:07 adam.happyassassin.net org.gnome.OnlineAccounts[2227]: (goa-daemon:2540): GLib-GIO-WARNING **: gdbusobjectmanagerclient.c:1586: Processing InterfaceRemoved signal for path /org/gnome/Identity/Identities/adamw_40_HAPPYASSASSIN_2e_NET but no object proxy exists

...

Jan 22 15:36:30 adam.happyassassin.net org.gnome.OnlineAccounts[2227]: goa-daemon-Message: /org/gnome/OnlineAccounts/Accounts/account_1420594800_0: Setting AttentionNeeded to FALSE because EnsureCredentials() succeded

it seems to have happened five times in the last two weeks.
Comment 2 Debarshi Ray 2017-01-06 17:54:35 UTC
Adam, are you still experiencing this? We have had a ton of fixes to the Kerberos code in the past few releases. Fedora 24 or newer would be relevant.
Comment 3 Adam Williamson 2017-01-06 22:05:29 UTC
I don't think I have, no...