Re: Problem with SASL and GSSAPI

[Norbert Klasen <klasen@zdv.uni-tuebingen.de>]

Jean-Eric Cuendet wrote:
> OK, so if I use:
> [root@testbed openldap]# ldapmodify -f sample.ldif -r -I
> It would be OK?
> I have always the same error:
> SASL/GSSAPI authentication started
> ldap_sasl_interactive_bind_s: Unknown error
>         additional info: GSSAPI: gss_acquire_cred: Miscellaneous failure;
> Permission denied;

Are you running slapd as non-root? If so, slapd might not be able to
read the key for the principal ldap/host@REALM from /etc/krb5.keytab

-- 
Norbert Klasen
DFN Directory Services                           tel: +49 7071 29 70335
ZDV, Universität Tübingen                        fax: +49 7071 29 5912
Wächterstr. 76, 72074 Tübingen              http://www.directory.dfn.de
Germany                             norbert.klasen@zdv.uni-tuebingen.de