Re: mechanism not supported error calling sasl_client_start()

Dan White <[email protected]>
Newsgroups gmane.comp.security.cyrus.sasl
Message-ID <[email protected]>
On 03/09/17 09:24 -0800, Ted Yu wrote:
>Mar  9 17:08:41 ed19f36081f3 client-test: GSSAPI Error: Unspecified GSS
>failure.  Minor code may provide more information (No Kerberos credentials
>available)
>
>More background:
>I am debugging code using docker VM running on Mac, trying to connect to
>secure server running on:
>
>CentOS Linux release 7.2.1511 (Core)
>
>If you can give some suggestion on how the user in docker can be
>authenticated thru Kerberos, that would be nice.
>
>Thanks

For most, there's a steep learning curve to getting Kerberos up and going.
You will need a Kerberos Domain Controller configured and tested prior to
attempting to get GSSAPI working. I recommend reading through this:

https://web.mit.edu/kerberos/

In short, on the client you'll need to initialize your ticket cache with
kinit or a similar tool and use klist to verify and view your ticket cache.

-- 
Dan White
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.