[Freeipa-users] generic failure: GSSAPI Error: Unspecified GSS failure

[Sumit Bose]

On Tue, Mar 31, 2015 at 11:26:53AM +0200, Benoit Rousselle wrote:
> hi,
> 
> I try to set the sudo password but I get a message : GSSAPI Error
> 
> What's mean this kind of message ?
> 
>  ldappasswd -Y GSSAPI -S -h my_server
> uid=sudo,cn=sysaccounts,cn=etc,dc=my_domain,dc=com
> New password:
> Re-enter new password:
> SASL/GSSAPI authentication started
> ldap_sasl_interactive_bind_s: Local error (-2)
>         additional info: SASL(-1): generic failure: GSSAPI Error:
> Unspecified GSS failure.  Minor code may provide more information (Ticket
> expired)

'Ticket expired', so you either have to call kinit again to get a fresh
TGT or there is some severe time mismatch between the client and the
server.

HTH

bye,
Sumit

> -- 
> Manage your subscription for the Freeipa-users mailing list:
> https://www.redhat.com/mailman/listinfo/freeipa-users
> Go to http://freeipa.org for more info on the project