[37948] in Kerberos

home help back first fref pref prev next nref lref last post

Re: KDC 1.15 startup error: Invalid credentials - while

daemon@ATHENA.MIT.EDU (Jaap Winius)
Thu Apr 13 19:20:54 2017

Message-ID: <20170414012033.159862e44b5czlj5@bitis.umrk.nl>
Date: Fri, 14 Apr 2017 01:20:33 +0200
From: Jaap Winius <jwinius@umrk.nl>
To: Jaap Winius <jwinius@umrk.nl>
In-Reply-To: <20170413193833.98725ihfmwcvt0nt@bitis.umrk.nl>
MIME-Version: 1.0
Content-Disposition: inline
Cc: kerberos@mit.edu
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: kerberos-bounces@mit.edu

Quoting Jaap Winius <jwinius@umrk.nl>:

>    slapd[560]: GSSAPI Error: Unspecified GSS failure. \
>    Minor code may provide more information \
>    (Server ldap/localhost@EXAMPLE.COM not found in Kerberos database)

Invalid credentials? It's because of this. Slapd should discover its  
identity by reading its keytab, the location for which can be found in  
the value for KRB5_KTNAME (set in /etc/default/slapd), but that's not  
happening. This is starting to look like a bug, perhaps in  
libsasl2-modules-gssapi-mit.

Cheers,

Jaap
________________________________________________
Kerberos mailing list           Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos

home help back first fref pref prev next nref lref last post