Re: SASL/GSSAPI authentication error

["Dieter Kluenter" <dieter@dkluenter.de>]

Frederick Kramer <kramer@ikf.uni-frankfurt.de> writes:

> Hello,
>
> I have authentication problems while accessing the LDAP database. Each
> attempt to view or modify the DB leads to this error:
>
> [root@mysystem]~> ldapwhoami
> SASL/GSSAPI authentication started
> ldap_sasl_interactive_bind_s: Local error (-2)
> 	additional info: SASL(-1): generic failure: GSSAPI Error:
> Unspecified GSS failure.  Minor code may provide more information (No
> credentials cache found)
>
> On the other hand users can log on, change their passwords and so on -
> all that's working fine.
>
> I found some similar problems in the web but no answer to those helped
> me to solve this. I suppose it's not a big thing and apologize for my
> limited understanding of ldap and authentification procedures.

Du you use kerberos at all? If so, check krb5 file permissions. Did you
create a service principal and a host principal? What is the output of
klist?

-Dieter

-- 
Dieter Klünter | Systemberatung
http://www.dpunkt.de/buecher/2104.html
GPG Key ID:8EF7B6C6