:thumbsup:

python seems redundant here

I don't know if this really helps. It directs users to run "koji", which is not really applicable for commands where that's symlinked or aliased to something else.

I think we should update this PR to stop logging this at "debug" level and make it "error" level.

I think the biggest change we should make here would be to update AuthError to mention the authentication type, and then add a document that describes "how to troubleshoot Kerberos authentication" with a walkthrough.

One problem is that Koji catches a base Exception class here, and then we hide that information behind the "-d" flag. It's more work for the user to re-run with "-d".

Catching the base Exception and then raising a single AuthError is not great. If this were entirely new code it would be great to simply raise the original exception here, but I understand there are some API considerations here (because clients might expect to catch AuthError).

What if we we sub-class AuthError to something like GSSAPIAuthError and include the error message from requests-gssapi in that?

Extended docs: https://pagure.io/fork/tkopecek/koji/commits/pr2826a

:thumbsup:

Commit d83c1524 fixes this pull-request