[Date Prev][Date Next] [Chronological] [Thread] [Top]

Re: Kerberos, GSSAPI Miscellaneous failure

To: sujiannming@gmail.com
Subject: Re: Kerberos, GSSAPI Miscellaneous failure
From: "Nicholas Clark" <nclark1@gmu.edu>
Date: Sun, 18 Sep 2005 13:07:06 -0400 (EDT)
Cc: openldap-software@OpenLDAP.org
Importance: Normal
In-reply-to: <561dc32605091708591fb3efdc@mail.gmail.com>
References: <f88b8080dc9e.432b26e8@gmu.edu> <561dc32605091708591fb3efdc@mail.gmail.com>
User-agent: SquirrelMail/1.5.0

I had only added ldap/FQDN since ldap.domain.etc is in the DNS for this
machine and in the hosts files on all machines.

- Nick

> On 9/16/05, nclark1@gmu.edu <nclark1@gmu.edu> wrote:
>>
>> I have created and set proper permissions on the ldap.keytab so that
>> slapd can see it
>>
>
> The ldap.keytab contains both the host and ldap principals, right?
>
>   ktadd -k ldap.keytab host/your_ldap_server
>   ktadd -k ldap.keytab ldap/your_ldap_server
>
> --
> Jiann-Ming Su
> "I have to decide between two equally frightening options.
>  If I wanted to do that, I'd vote." --Duckman
>

References:
- Kerberos, GSSAPI Miscellaneous failure
  - From: nclark1@gmu.edu
- Re: Kerberos, GSSAPI Miscellaneous failure
  - From: Jiann-Ming Su <sujiannming@gmail.com>

Prev by Date: Re: Searching for records with missing attribute
Next by Date: Re: Kerberos, GSSAPI Miscellaneous failure
Index(es):
- Chronological
- Thread