On Tue, Mar 31, 2015 at 11:26:53AM +0200, Benoit Rousselle wrote: > hi, > > I try to set the sudo password but I get a message : GSSAPI Error > > What's mean this kind of message ? > > ldappasswd -Y GSSAPI -S -h my_server > uid=sudo,cn=sysaccounts,cn=etc,dc=my_domain,dc=com > New password: > Re-enter new password: > SASL/GSSAPI authentication started > ldap_sasl_interactive_bind_s: Local error (-2) > additional info: SASL(-1): generic failure: GSSAPI Error: > Unspecified GSS failure. Minor code may provide more information (Ticket > expired)
'Ticket expired', so you either have to call kinit again to get a fresh TGT or there is some severe time mismatch between the client and the server. HTH bye, Sumit > -- > Manage your subscription for the Freeipa-users mailing list: > https://www.redhat.com/mailman/listinfo/freeipa-users > Go to http://freeipa.org for more info on the project -- Manage your subscription for the Freeipa-users mailing list: https://www.redhat.com/mailman/listinfo/freeipa-users Go to http://freeipa.org for more info on the project
