[Date Prev][Date Next] [Chronological] [Thread] [Top]

Re: ldapsearch + read-only domain controller: cannot bind



Am Tue, 21 Jun 2016 11:55:35 +0300
schrieb l@avc.su:

> Hi Mark.
> 
> Thank you, looks like the problem is not related to OpenLDAP package.
> I've tried to get a service ticket for
> ldap/dc.contoso.com@CONTOSO.COM, but to no avail:
[...]

As i mentioned in my first post, linux kerberized clients require a
host principal and a service principal. Read the Microsoft docs on
kerberos services for Unix.

-Dieter

-- 
Dieter Klünter | Systemberatung
http://dkluenter.de
GPG Key ID:DA147B05
53°37'09,95"N
10°08'02,42"E