Ok the error I am getting is:
(Tue Apr 5 16:23:47 2016) [sssd[be[default]]] [sasl_bind_send] (0x0080): Extended failure
message: [SASL(-1): generic failure: GSSAPI Error: Unspecified GSS failure. Minor code
may provide more information (KDC has no support for encryption type)]
Ldapsearch is working fine....
Ondrej
From: Ondrej Valousek [mailto:Ondrej.Valousek@s3group.com]
Sent: Tuesday, April 05, 2016 4:49 PM
To: End-user discussions about the System Security Services Daemon
<sssd-users(a)lists.fedorahosted.org>
Subject: [SSSD-users] Allowed Kerberos encryption types for SSSD
Hi List,
I am currently fighting to get Kerberized NFS working against clustered Netapp. Their
support says that they support all enc types but arcfour-hmac.
When I specify default_enctypes in krb5.conf and omit arcfour-hmac enc type, sssd stops
working (goes offline, can not connect).
Funny thing is, that kinit –k $HOSTNAME$ works just fine.
Is SSSD picky about Kerberos encryption types or not?
Thanks,
Ondrej
-----
The information contained in this e-mail and in any attachments is confidential and is
designated solely for the attention of the intended recipient(s). If you are not an
intended recipient, you must not use, disclose, copy, distribute or retain this e-mail or
any part thereof. If you have received this e-mail in error, please notify the sender by
return e-mail and delete all copies of this e-mail from your computer system(s). Please
direct any additional queries to:
communications@s3group.com<mailto:communications@s3group.com>. Thank You. Silicon
and Software Systems Limited (S3 Group). Registered in Ireland no. 378073. Registered
Office: South County Business Park, Leopardstown, Dublin 18.
-----
The information contained in this e-mail and in any attachments is confidential and is
designated solely for the attention of the intended recipient(s). If you are not an
intended recipient, you must not use, disclose, copy, distribute or retain this e-mail or
any part thereof. If you have received this e-mail in error, please notify the sender by
return e-mail and delete all copies of this e-mail from your computer system(s). Please
direct any additional queries to: communications(a)s3group.com. Thank You. Silicon and
Software Systems Limited (S3 Group). Registered in Ireland no. 378073. Registered Office:
South County Business Park, Leopardstown, Dublin 18.