Re: replication with SASL/GSSAPI

[GOMBAS Gabor <gombasg@inf.elte.hu>]

On Wed, Feb 14, 2001 at 08:41:17PM +0900, Roman Kagan wrote:

> As far as I understand a client needs a valid TGT in order for
> SASL/GSSAPI authentication to succeed.  This does work with
> ldapsearch/ldapmodify when run by a user with a ticket cache holding a
> valid TGT.  However, slurpd is run at system startup and has no way of
> obtaining a TGT and keeping it valid.  How do people solve this
> problem?

Run "kinit --use-keytab ..." from cron.

Gabor

-- 
Gabor Gombas                                       Eotvos Lorand University
E-mail: gombasg@inf.elte.hu                        Hungary