#993 AuthError: unable to obtain a session
Closed Opened by dagostinelli.

Recently, I became a new package maintainer and now I'm trying to get fedpkg to build my package. The problems appears to be with koji.

$ koji hello
AuthError: unable to obtain a session

and

$ fedpkg build
Kerberos authentication is used, but you do not have a valid credential.
Please use kinit to get credential with a principal that has realm FEDORAPROJECT.ORG
Could not execute build: Could not login to https://koji.fedoraproject.org/kojihub

I have google'd around and tried to reinstall things, to no avail:

$ dnf history
<snip>
   231 | reinstall python-krbV -y | 2018-07-12 23:40 | Reinstall      |    1   
   230 | reinstall koji           | 2018-07-12 23:38 | Reinstall      |    1   
   229 | reinstall fedora-cert    | 2018-07-12 23:33 | Reinstall      |    1   
   228 | update fedpkg koji fedor | 2018-07-12 23:26 | Update         |    3 E<
<snip>

Other things I have tried:
- created/removed ~/.fedora.upn file.
- re-run fedora-packager-setup
- re-run kinit
- I have issued:

$ fedora-cert -v
Verifying Certificate
cert expires: 2018-10-17

I also re/created ~/.config/rpkg/fedpkg.conf and put in a token. This enabled me to request-repo and request-branch. This was a non-intuitive step, BTW, and required a lot of guess and check to work out that I needed this file and how to set it up.

There is also a file at /etc/rpkg/fedpkg.conf which appears to be valid/correct. I could post it if you want.


My opinion: This issue is both a bug and a support issue.

As a bug:
- The message "unable to obtain a session" doesn't help us understand what to do to fix it. What element of the session creating process is messed up?
- Running kinit doesn't fix this issue
- running fedora-packager-setup doesn't fix this issue

Additionally, fedora-packager-setup could have set up the token as well. (I'm not sure if I should post that comment elsewhere or here)

As a support issue:
I have no idea what to do to fix this. Help.

Problem solved -- used IRC channel (https://webchat.freenode.net/?channels=#fedora-releng) and got help from @tibbs

Here's what I did:

sudo dnf update sssd-kcm
kinit dagostinelli@FEDORAPROJECT.ORG
klist
<got stuff>
koji hello
<worked>
fedpkg build
<worked>

The clue was that klist brought back nothing and @tibbs realized that it had to do with a bug in F27's sssd-kcm package.

Metadata Update from @dagostinelli:
- Issue status updated to: Closed (was: Open)

This issue has been migrated to Fedora Forge:
https://forge.fedoraproject.org/koji/koji/issues/993

Please continue any further discussion there.

Metadata