[Pkg-sssd-devel] Bug#939225: sssd fails on dual stack / ipv6 only hosts

[Robert Senger]

Package: sssd
Version: 1.16.3-3.1
Severity: important
Tags: ipv6

Dear Maintainer,

   * What led up to the situation?

Laptop with sssd and sssd-krb5 installed. Two wifi networks, one dual stack
ipv4/ipv6, other ipv6 only (with dns64/nat64).

   * What exactly did you do (or not do) that was effective (or
     ineffective)?

Laptop connects to dual stack netwotk. Kerberos authentication works, kdc is
reached via ipv4 (seen with tcpdump on the server). Laptop then switches to
ipv6 only network. Kerberos authentication fails, kinit reports kdc cannot be
contacted.

   * What was the outcome of this action?

Kerberos authentication fails if ipv4 is initially available, and becomes
unavailable after switching networks.

   * What outcome did you expect instead?

sssd should always try both address families, regardless of previous
availability. sssd should prefer ipv6 by default.




-- System Information:
Debian Release: 10.0
  APT prefers stable-updates
  APT policy: (500, 'stable-updates'), (500, 'stable')
Architecture: amd64 (x86_64)

Kernel: Linux 4.19.0-5-amd64 (SMP w/4 CPU cores)
Kernel taint flags: TAINT_PROPRIETARY_MODULE, TAINT_OOT_MODULE, TAINT_UNSIGNED_MODULE
Locale: LANG=de_DE.UTF-8, LC_CTYPE=de_DE.UTF-8 (charmap=UTF-8), LANGUAGE=de_DE.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

Versions of packages sssd depends on:
ii  python3-sss  1.16.3-3.1
ii  sssd-ad      1.16.3-3.1
ii  sssd-common  1.16.3-3.1
ii  sssd-ipa     1.16.3-3.1
ii  sssd-krb5    1.16.3-3.1
ii  sssd-ldap    1.16.3-3.1
ii  sssd-proxy   1.16.3-3.1

sssd recommends no packages.

sssd suggests no packages.

-- no debconf information