On Thu Sep 28 19:36:06 2017, muks wrote:
> On Thu, Sep 28, 2017 at 05:26:22PM +0000, Evan Hunt via RT wrote:
> >
> > > => done. Ready for review. BTW I don't know if we want
> > > a copyright in this trivial file (# is the comment char).
> >
> > This looks fine and I'm tempted to just merge it, but Mukund, can you
> > confirm that it fixes the problem first?
> 
> It does not. The following error occurs:
> 
> 29-Sep-2017 01:00:57.407 gss cred: "muks@ISC.ORG", GSS_C_INITIATE,
> 30320
> 29-Sep-2017 01:00:57.407 failed gss_accept_sec_context: GSSAPI error:
> Major = Unspecified GSS failure.  Minor code may provide more
> information, Minor = Request ticket server
> DNS/blu.example.nil@EXAMPLE.NIL kvno 1 enctype rc4-hmac found in
> keytab but cannot decrypt ticket.
> 29-Sep-2017 01:00:57.407 process_gsstkey(): dns_tsigerror_badkey
> 
> After kdestroy:
> 
> 29-Sep-2017 01:03:42.235 failed gss_inquire_cred: GSSAPI error: Major
> = Unspecified GSS failure.  Minor code may provide more information,
> Minor = No Kerberos credentials available (default cache:
> KEYRING:persistent:1000).
> 29-Sep-2017 01:03:42.235 failed gss_accept_sec_context: GSSAPI error:
> Major = Unspecified GSS failure.  Minor code may provide more
> information, Minor = Request ticket server
> DNS/blu.example.nil@EXAMPLE.NIL kvno 1 enctype rc4-hmac found in
> keytab but cannot decrypt ticket.
> 29-Sep-2017 01:03:42.235 process_gsstkey(): dns_tsigerror_badkey

=> it looks like it uses a system wide krb5.conf. There is no
muks@ISC.ORG in the system test. BTW how did you get these
messages? Did you run the system test tests.sh?