Is it slapd reading its key tab incorrectly or is the hostname being derived 
incorrectly.  Is this a host file issue?

Matt Pallissard


-------- Original Message --------
From: Jaap Winius <[email protected]>
Sent: Thu Apr 13 18:20:33 CDT 2017
To: Jaap Winius <[email protected]>
Cc: "Pallissard, Matthew" <[email protected]>, [email protected]
Subject: Re: KDC 1.15 startup error: Invalid credentials - while initializing 
database

Quoting Jaap Winius <[email protected]>:

>    slapd[560]: GSSAPI Error: Unspecified GSS failure. \
>    Minor code may provide more information \
>    (Server ldap/[email protected] not found in Kerberos database)

Invalid credentials? It's because of this. Slapd should discover its  
identity by reading its keytab, the location for which can be found in  
the value for KRB5_KTNAME (set in /etc/default/slapd), but that's not  
happening. This is starting to look like a bug, perhaps in  
libsasl2-modules-gssapi-mit.

Cheers,

Jaap
________________________________________________
Kerberos mailing list           [email protected]
https://mailman.mit.edu/mailman/listinfo/kerberos

Reply via email to