[Date Prev][Date Next] [Chronological] [Thread] [Top]

Re: Kerberized LDAP not accessible



Am Fri, 21 Jan 2011 17:51:03 +0100
schrieb Thomas Schweikle <tps@vr-web.de>:

> Am 21.01.2011 17:17, schrieb Dan White:
> > On 21/01/11 17:06 +0100, Thomas Schweikle wrote:
> >> Am 21.01.2011 16:02, schrieb Dan White:

[...]
> #ldapsearch -LLL -x -H ldap://srv.example.com -s "base" -b ""
> supportedSASLMechanisms
> dn:
> supportedSASLMechanisms: GSSAPI
> 
> #ldapsearch -Y GSSAPI -LLL -H ldap://srv.example.com -s "base" -b ""
> supportedSASLMechanisms
> SASL/GSSAPI authentication started
> ldap_sasl_interactive_bind_s: Other (e.g., implementation specific)
> error (80)
>         additional info: SASL(-1): generic failure: GSSAPI Error:
> Unspecified GSS failure.  Minor code may provide more information
> (Permission denied)

The user that runs slapd has no access to a keytab file.

-Dieter

-- 
Dieter Klünter | Systemberatung
http://dkluenter.de
GPG Key ID:DA147B05
53°37'09,95"N
10°08'02,42"E

Attachment: signature.asc
Description: PGP signature