IBM Power Connect, learn, share, and engage with IBMPower. Join / Log in
but the published fixes require HMC V9 R2 952.1, which is not on the list of affected versions.Just for safety, we'll roll them out, even though we think we might be safe, but if I'm reading anything wrong here, please let me know were my mistake is.Best regards, Alexander
We're in the same boat here, at 951 so we need to upgrade to 952 the apply the fix. We started rolling this out, and if you check SP 952's readme it has this know issue listed in it:
Kerberos user cannot login from GUI, such user should continue to use CLI.
And as expected as soon as we applied the SP we couldn't login to the GUI with any accounts setup with kerberos.This is a pretty serious known issue, when is a fix going to be released?
I spoke with development about the issue, and users were blocked due to a fix that was implemented to prevent expired passwords from working. This issue was noticed with the change in drivers that handle kerb authentication on the HMC.
In 1011 there will be a way to disable this fix, thus allowing GUI logins. However, this workaround will also allow expired passwords. This workaround is only for customers who are not concerned with expired passwords. Development is also working on a full fix in a future release date.
Please let us know if there are any further questions or concerns.