[Freeipa-users] GSSAPI Failure

[Simo Sorce]

On Mon, 2008-11-10 at 16:53 +0300, Konstantin Kozlov wrote:
> Hello,
> 
> I have the following problem.
> 
> On the ipaserver after reboot I get the following error:
> 
> # kinit admin
> # ipa-finduser admin
> Connection to database failed: Invalid credentials: SASL(-13): 
> authentication failure: GSSAPI Failure: gss_accept_sec_context
> 
> However it is possible to login to ipaclient with ipauser.

Do you have multiple masters ?

> Before reboot it worked.
> 
> Does anybody have any ideas what is wrong?

Is krb5kdc up and runnig ?
What do you see in /var/log/krb5kdc.log ?

Simo.

-- 
Simo Sorce * Red Hat, Inc * New York