krb5 issues

Ken Bass kbass at kenbass.com
Mon May 23 15:21:53 UTC 2016


Hello,

I enabled krb5 in my audisp-remote and audispd-remote reports "GSS-API 
error sending token length" and fails to log remotely.

If I reboot the destination auditd server AFTER the clients are running 
it appears to work. But if I reboot any clients machine, logging from 
that rebooted machine fails.
I created my service principals using freeipa - all systems are clean 
installs of Centos 7.2.

For now, I disabled krb5, but that is not a good solution.

Thank you,
Ken




More information about the Linux-audit mailing list