LDAP bind trouble via Kerb/SASL/GSSAPI- principal name mangled
I have an OSX OpenLDAP master and I'm trying to bind from a Debian machine. When i try a ldapsearch I get the following error:
ldap_sasl_interactive_bind_s: Local error (-2)
additional info: SASL(-1): generic failure: GSSAPI Error: Miscellaneous failure (Server not found in Kerberos database)
The Kerb server log reveals that 'krbtgt/UCSD.EDU@CORE.UCSD.EDU' is not being found in the Kerberos database.
The principal for the client should be krbtgt/CORE.UCSD.EDU@CORE.UCSD.EDU
AFAIK I've got all the config files in order on the Debian machine.
Sorry if there's a lack of information here, I just don't know where to start.
Thanks for any help.
|