[Freeipa-users] generic failure: GSSAPI Error: Unspecified GSS failure

[Andy Thompson]

> I try to set the sudo password but I get a message : GSSAPI Error
> 
> What's mean this kind of message ?
> 
>  ldappasswd -Y GSSAPI -S -h my_server
> uid=sudo,cn=sysaccounts,cn=etc,dc=my_domain,dc=com
> New password:
> Re-enter new password:
> SASL/GSSAPI authentication started
> ldap_sasl_interactive_bind_s: Local error (-2)
>         additional info: SASL(-1): generic failure: GSSAPI Error: Unspecified GSS
> failure.  Minor code may provide more information (Ticket expired)

Your kerberos ticket has expired.  You need to get a new ticket using kinit and then try using gssapi.  

-andy