[Pkg-sssd-devel] Bug#939225: Bug#939225: sssd fails on dual stack / ipv6 only hosts

Timo Aaltonen tjaalton at debian.org
Wed Sep 18 12:56:10 BST 2019


On 2.9.2019 14.28, Robert Senger wrote:
> Package: sssd
> Version: 1.16.3-3.1
> Severity: important
> Tags: ipv6
> 
> Dear Maintainer,
> 
>    * What led up to the situation?
> 
> Laptop with sssd and sssd-krb5 installed. Two wifi networks, one dual stack
> ipv4/ipv6, other ipv6 only (with dns64/nat64).
> 
>    * What exactly did you do (or not do) that was effective (or
>      ineffective)?
> 
> Laptop connects to dual stack netwotk. Kerberos authentication works, kdc is
> reached via ipv4 (seen with tcpdump on the server). Laptop then switches to
> ipv6 only network. Kerberos authentication fails, kinit reports kdc cannot be
> contacted.
> 
>    * What was the outcome of this action?
> 
> Kerberos authentication fails if ipv4 is initially available, and becomes
> unavailable after switching networks.
> 
>    * What outcome did you expect instead?
> 
> sssd should always try both address families, regardless of previous
> availability. sssd should prefer ipv6 by default.

This is probably same as https://pagure.io/SSSD/sssd/issue/3973 ?

fixed in 1.16.4/2.x


-- 
t



More information about the Pkg-sssd-devel mailing list