Re: Kerberized LDAP not accessible

Am Fri, 21 Jan 2011 17:51:03 +0100 schrieb Thomas Schweikle tps@vr-web.de:

Am 21.01.2011 17:17, schrieb Dan White:

...

On 21/01/11 17:06 +0100, Thomas Schweikle wrote:

...

Am 21.01.2011 16:02, schrieb Dan White:

[...]

#ldapsearch -LLL -x -H ldap://srv.example.com -s "base" -b "" supportedSASLMechanisms dn: supportedSASLMechanisms: GSSAPI

#ldapsearch -Y GSSAPI -LLL -H ldap://srv.example.com -s "base" -b "" supportedSASLMechanisms SASL/GSSAPI authentication started ldap_sasl_interactive_bind_s: Other (e.g., implementation specific) error (80) additional info: SASL(-1): generic failure: GSSAPI Error: Unspecified GSS failure. Minor code may provide more information (Permission denied)

The user that runs slapd has no access to a keytab file.

-Dieter