[389-users] MIT Kerberos and FDS integration

[Rob Crittenden]

John Robert Mendoza wrote:
> Actually i use the
> 
> #/usr/lib/mozldap/ldapsearch
> 
> There is no option for the -Y.
> 
> I can bind using GSSAPI by this command
> 
> #/usr/lib/mozldap/ldapsearch -o "mech=GSSAPI" -b "my suffix" objectclass=*
> 
> and it outputs this error
> 
> ldapsearch: started Mon Jul 20 16:33:07 2009
> 
> ldap_init( localhost, 389 )
> Bind Error: Invalid credentials
> Bind Error: additional info: SASL(-1): generic failure: GSSAPI Error: 
> Unspecified GSS failure.  Minor code may provide more information 
> (Permission denied)
> 

Check the permission and ownership of the DS keytab.

rob

-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/x-pkcs7-signature
Size: 3245 bytes
Desc: S/MIME Cryptographic Signature
URL: <http://listman.redhat.com/archives/fedora-directory-users/attachments/20090720/ff55e502/attachment.bin>