Re: OpenLDAP / SASL / Heimdal

[sam <samwun@hgcbroadband.com>]

Andreas Haupt wrote:

>Hello,
>
>I'm trying to setup OpenLDAP with SASL2 and Heimdal. When trying to 
>authenticate I get the following error in the log files:
>
>2004-06-07T11:43:01 TGS-REQ blh@HMI.DE from IPv4:134.30.5.92 for ldap/
>dice.hmi.de@HMI.DE
>2004-06-07T11:43:01 TGS-REQ blh@HMI.DE from IPv4:134.30.5.92 for ldap/
>dice.hmi.de@HMI.DE
>2004-06-07T11:43:01 Decoding transited encoding: KDC policy rejects 
>request
>2004-06-07T11:43:01 Decoding transited encoding: KDC policy rejects 
>request
>2004-06-07T11:43:01 sending 115 bytes to IPv4:134.30.5.92
>2004-06-07T11:43:01 sending 115 bytes to IPv4:134.30.5.92
>
>I don't have a clue what this means and how I can avoid the problem... 
>Heimdal server is version 0.6 (SuSE 9.0).
>
>Greetings
>Andreas
>  
>

As root, execute command "ktutil list" to see whether you have 
ldap/dice.hmi.de@HMI.DE.
and add user blh use kadmin. Then su - blh, and kinit, then try again.

sam