[Freeipa-devel] ipa_kpasswd - server error

[Simo Sorce]

On Sat, 2008-05-31 at 16:33 -0500, Matt Flusche wrote:
> Hello, I've been testing freeipa for a few weeks.  Current  
> configuration, is fedora 9 x86_64 and ipa-1.0.0-6.  I'm having a  
> problem with ipa_kpasswd I can't seem to get past.  I'm getting a  
> "Server error: Server Error" from kpasswd.  ipa_kpasswd is logging  
> the following:
> 
> kpasswd[14969]: Unable to bind to ldap server
> 
> ns-slapd is logging the following:
> 
> conn=17 received a non-LDAP message (tag 0x53, expected 0x30)
> 
> The kadmin/changepw principal seems to be working. I can run the  
> following successfully to test
> 
> # kinit -V -k -t /var/kerberos/krb5kdc/kpasswd.keytab kadmin/changepw
> # ldapsearch -v -Y GSSAPI
> 
> Suggestions?

Do you see any AVC message in the audit.log by chance ?

Simo.

-- 
Simo Sorce * Red Hat, Inc * New York