[Freeipa-users] GSSAPI Failure

[Konstantin Kozlov]

Simo Sorce wrote:
> On Thu, 2008-11-13 at 10:25 +0300, Konstantin Kozlov wrote:
>> I did not from the beginning but when I did and restarted krb5kdc and 
>> dirsrv nothing changed. My krb5.conf contains forwardable = no in two 
>> places - libdefaults and appdefaults. Is that correct?
> 
> No, without forwardable tickets you cannot successfully use the IPA Web
> UI or the CLI tools, they rely on the fact that the XML-RPC interface
> can use your forwarded ticket to contact the ldap server.
> 
> Simo.
> 

Unfortunately it doesn't change my situation.

So is it the dead end?

-- 
Konstantin Kozlov
Department of Computational Biology,
Center for Advanced Studies,
SPb State Polytechnical University,
195251, Polytechnicheskaya ul., 29,
bld 4, office 204,
St.Petersburg, Russia.

Tel./fax: +7 812 596 2831