Hello everyone,
I working on configuring OpenLdap 2.4.36 with kerberos for oVirt running on f19.
I follow following instruction: https://bugzilla.redhat.com/show_bug.cgi?id=967327#c5
Please note that the instruction was written for f18. In order to have step 18 working from command line I had to set SASL_NOCANON to off. The reason was that I got:
ldap_sasl_interactive_bind_s: Invalid credentials (49) additional info: SASL(-13): authentication failure: GSSAPI Failure: gss_accept_sec_context
When SASL_NOCANON is off I can search the ldap but have the same issue from java code:
I got javax.naming.AuthenticationException: [LDAP: error code 49 - SASL(-13): authentication failure: GSSAPI Failure: gss_accept_sec_context]. Have this when connecting using engine-manage-domains (http://gerrit.ovirt.org/gitweb?p=ovirt-engine.git;a=blob;f=backend/manager/m... line 84).
Can you please point me where is my config issue?
I copied engine-devel for reference.
Thanks, Piotr