bstansell / conserver

Logged, multi-user access to device consoles
https://www.conserver.com/
BSD 3-Clause "New" or "Revised" License
129 stars 38 forks source link

Connection issues when kerberos ticket is active #64

Open faxm0dem opened 3 years ago

faxm0dem commented 3 years ago

We're having issues connecting to the daemon when a kerberos ticket is available. This is happening since we upgraded the host running conserver from Centos7 to Centos8Stream, thus moving conserver from 8.2.1 to 8.2.2.

> klist
Ticket cache: FILE:/tmp/krb5cc_3942_So3SEArTmG
Default principal: yourstruly@EXAMPLE.COM

Valid starting       Expires              Service principal
06/30/2021 08:04:20  07/01/2021 11:45:44  krbtgt/EXAMPLE.COM@EXAMPLE.COM
> console -u
console: lost connection
> kdestroy
> console -u
 console1                 up   <none>
 console2                 up   <none>
 console3                 up   <none>
 console4                 up   <none>
[...]
ThreeFx commented 1 year ago

We are facing the same issues with 8.2.6 that have appeared overnight, without us modifying any configuration or restarting any services on Debian bullseye, which makes me suspect it could be an issue that occurs related to updates on the Kerberos server side?