RE: Server ldap/[email protected] not found in Kerberos database
Jason Trupp <[email protected]>
| Newsgroups | gmane.comp.security.cyrus.sasl |
|---|---|
| Message-ID | <[email protected]> |
In our experience, the all CAPS domain name can cause problems. The entire FQDN needs to be lowercase to work properly. Warmest regards, Jason Trupp Symas Corporation/Evolveum MidPoint Support Engineer – Trainer (855) LDAP-GUY -----Original Message----- From: Cyrus-sasl [mailto:[email protected]] On Behalf Of Jaap Winius Sent: Friday, April 14, 2017 4:54 AM To: Dieter Klünter Cc: [email protected] Subject: Re: Server ldap/[email protected] not found in Kerberos database Quoting Dieter Klünter <[email protected]>: >> slapd[1668]: GSSAPI Error: Unspecified GSS failure. \ >> Minor code may provide more information \ >> (Server ldap/[email protected] not found in Kerberos database) > [...] > > The slapd user must be able to read the relevant keytab. Already covered: I do that by giving the openldap group read access to it. Otherwise, /etc/hostname is okay, 'hostnamectl status' gives the same, there's nothing weird in /etc/hosts and the DNS forward and reverse records give all the same answers. Cheers, Jaap