#9788 Cann't kinit after the FAS->Accounts
Closed: Fixed by ryanlerch. Opened by rebus.

Hello,
after FAS to Accounts switch I was not able to kinit. It would be probably worth documenting this error message in some FAQ for the FAS->Accounts migration - especially when using the 2FA(OTP).

I have:
1) reset the password in https://accounts.fedoraproject.org/
2) add the second factor OTP - https://docs.fedoraproject.org/az/fedora-accounts/user/#twofactor
3) test the changed password works for the website (https://accounts.fedoraproject.org/, https://src.fedoraproject.org/dashboard/projects)
4) follow the guide on how to initiate the kerberos ticket - https://docs.fedoraproject.org/az/fedora-accounts/user/#pkinit

When trying to initiate the armor.ccache it was asking for a password and none of the passwords worked (fas/accounts/accounts+otp) getting following message:
$ kinit -n @FEDORAPROJECT.ORG -c FILE:armor.ccache
Password for WELLKNOWN/ANONYMOUS@FEDORAPROJECT.ORG:

Upgrading+reinstaling the related packages fixed my problem (probably just upgrade is fine).
dnf -y update fedora-packager krb5-pkinit

I believe that it would be worth mentioning in the guide (https://docs.fedoraproject.org/az/fedora-accounts/user/#pkinit) that krb5-pkinit package is needed and that it is installed as dependency by the latest version of fedora-packager and it was not there before, so it is actually it is actually "update/install fedora-packager" instead of "install" in the guideline https://docs.fedoraproject.org/az/fedora-accounts/user/#_1_install_fedora_packager

Also I would recommend to explicitly mentions that the "kinit -n @FEDORAPROJECT.ORG -c FILE:armor.ccache" is not supposed to be asking for any password.

Best regards
Michal Ambroz


If you would like to contribute some of these changes yourself, you can find the
documentation at: https://github.com/fedora-infra/fedora-accounts-docs

Just pushed the following to the docs repo:

https://github.com/fedora-infra/fedora-accounts-docs/commit/b4f45c60b6aafc41e3caef1c178b91b4ee39e805

it should show up on the docs within the hour.

@pingou happy for you to close this one if you are.

@ryanlerch should we mention which (minimal) version is needed?

@pingou good point:

https://github.com/fedora-infra/fedora-accounts-docs/commit/ee88358e73cdbebc931980a5e5fdd46a07077cbd

added.

:thumbsup: for me.

Metadata Update from @ryanlerch:
- Issue assigned to ryanlerch

Metadata Update from @ryanlerch:
- Issue close_status updated to: Fixed
- Issue status updated to: Closed (was: Open)

Thank you. Looks OK to me.

Metadata