[Freeipa-users] GSSAPI Failure
Konstantin Kozlov
kozlov at spbcas.ru
Fri Nov 14 13:19:29 UTC 2008
Simo Sorce wrote:
> On Fri, 2008-11-14 at 09:04 +0300, Konstantin Kozlov wrote:
>> NTP, DNS and DHCP are on another server, they were set up alot
>> earlier
>> and working.
>>
>> Does the ldapsearch error indicate that FDS fails and not IPA?
>
> No the failure means that the kdc used and the ldap keytab are not in
> sync.
>
> Have you tried to manually create a keytab for
> ldap/hedgehog.bio.spbcas.ru at BIO.SPBCAS.RU by chance and/or trying to get
> a keytab for this principal with ipa-getkeytab ?
>
> Simo.
>
Yes, I did that. Can it be the problem? Shoul I remove it? How?
--
Konstantin Kozlov
Department of Computational Biology,
Center for Advanced Studies,
SPb State Polytechnical University,
195251, Polytechnicheskaya ul., 29,
bld 4, office 204,
St.Petersburg, Russia.
Tel./fax: +7 812 596 2831
More information about the Freeipa-users
mailing list