On 24/06/2022 09:32, Serge Krawczenko via FreeIPA-users wrote:
ldapsearch operates properly with `hostname` but not localhost
With localhost i'm getting
GSSAPI Error: Unspecified GSS failure. Minor code may provide more
information (Server ldap/localhost@<REALM> not found in Kerberos database)
Any actions needed to enable ldap/localhost principal >
This is for better understanding rather than practical use.
ldapsearch constructs the Kerberos principal name based on 'ldap' and
the hostname you specify. Think of it this way: ldap/server1,
ldap/server2 are separate identities within a kerberos realm.
So, when told to connect to 'localhost' ldapsearch is very simply going
to try to authenticate to ldap/localhost, which wouldn't exist in a
normal Kebreros realm. As indeed, it doesn't in yours as shown by the
error message.
--
Sam Morris <https://robots.org.uk/>
PGP: rsa4096/CAAA AA1A CA69 A83A 892B 1855 D20B 4202 5CDA 27B9
_______________________________________________
FreeIPA-users mailing list -- freeipa-users@lists.fedorahosted.org
To unsubscribe send an email to freeipa-users-le...@lists.fedorahosted.org
Fedora Code of Conduct:
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives:
https://lists.fedorahosted.org/archives/list/freeipa-users@lists.fedorahosted.org
Do not reply to spam on the list, report it:
https://pagure.io/fedora-infrastructure
