[Freeipa-users] GSSAPI Failure

[Simo Sorce]

On Fri, 2008-11-14 at 09:04 +0300, Konstantin Kozlov wrote:
> 
> NTP, DNS and DHCP are on another server, they were set up alot
> earlier 
> and working.
> 
> Does the ldapsearch error indicate that FDS fails and not IPA?

No the failure means that the kdc used and the ldap keytab are not in
sync.

Have you tried to manually create a keytab for
ldap/hedgehog.bio.spbcas.ru at BIO.SPBCAS.RU by chance and/or trying to get
a keytab for this principal with ipa-getkeytab ?

Simo.

-- 
Simo Sorce * Red Hat, Inc * New York