[SSSD] can't connect to openldap using GSSAPI

Alexander Gordeev lasaine at lvk.cs.msu.su
Fri Jun 25 10:35:19 UTC 2010


On Fri, 25 Jun 2010 11:25:22 +0200
Sumit Bose <sbose at redhat.com> wrote:

> On Fri, Jun 25, 2010 at 12:55:02PM +0400, Alexander Gordeev wrote:
> > 
> > Sorry, I didn't tell you that this log was from another machine, with
> > it's own key, and therefore I changed ldap_sasl_authid appropriately.
> > On desktopvm everything is the same i.e. auth fails in the same way.
> > 
> > Seems I'll have to dive into debugging SASL... But maybe you have some
> > hints for me? :)
> > 
> > 
> > -- 
> >   Alexander
> 
> If 
> 
> kinit -k -t /etc/krb5.keytab && ldapsearch
> 
> works on desktopvm you can try with the credentail cache of sssd
> /var/lib/sss/db/ccache_GNET (please check if the TGT is still valid
> before you use it):
> 
> KRB5CCNAME=/var/lib/sss/db/ccache_GNET ldapsearch 
> 
> should work

Thanks!
It works.

> If this work, then I think sssd does something wrong. If it does not
> work, please compare the content of the ccache you get with 'kinit -k -t
> /etc/krb5.keytab' with /var/lib/sss/db/ccache_GNET.

-- 
  Alexander
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 489 bytes
Desc: not available
URL: <https://lists.fedorahosted.org/pipermail/sssd-devel/attachments/20100625/07d2190c/attachment.sig>


More information about the sssd-devel mailing list