GSSAPI Error: Miscellaneous failure (see text) (Message stream modified)

[Michael Ströder <michael@stroeder.com>]

HI!

I'd like to access a W2K3 Active Directory with OpenLDAP tools.

I obtained a ticket from that server:

$ klist
Credentials cache: FILE:/tmp/krb5cc_500
        Principal: kwagner@XXX.LOCAL
  Issued           Expires          Principal 

Apr 20 13:04:16  Apr 20 23:04:16  krbtgt/XXX.LOCAL@XXX.LOCAL

Unfortunately it does not work:

$ ldapsearch -P 3 -H ldap://bdb1.xxx.local -b "" -s base -Y
GSSAPI
SASL/GSSAPI authentication started
ldap_sasl_interactive_bind_s: Local error (-2)
        additional info: SASL(-1): generic failure: GSSAPI Error: 
Miscellaneous failure (see text) (Message stream modified)

Anyone having a clue here?

Ciao, Michael.