my guess would be that there is a SELinux tag/permission difference

do a ls -lZ of the two files and see if they are different.

David Lang

On Wed, 8 Oct 2014, Natxo Asenjo wrote:


After following the instructions on http://www.rsyslog.com/doc/gssapi.html
I can forward/receive messages using the gssapi module using the centos 6
rsyslogd.

However, is it possible to use another credential cache file? We use IPA by
Redhat (an ldap/kerberos/dns solution) and all the joined hosts already
have a host credential cache in /var/tmp/host_0.

I have tried setting this in /etc/sysconfig/rsyslogd (centos file for
startup options for rsyslogd):

KRB5CCNAME='/var/tmp/host_0'

but no cookie :(. Every time I got this error:

Oct  8 13:08:37 host rsyslogd: GSS-API error initializing context:
Credentials cache file '/tmp/krb5cc_0' not found
Oct  8 13:08:37 host rsyslogd-2024: GSS-API Context initialization failed

Copying the /var/tmp/host_0 to /tmp/krb5cc_0 solves the problem.

Thanks in advance for any tips.
--
Groeten,
natxo
_______________________________________________
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards
NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of 
sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE 
THAT.

_______________________________________________
rsyslog mailing list
http://lists.adiscon.net/mailman/listinfo/rsyslog
http://www.rsyslog.com/professional-services/
What's up with rsyslog? Follow https://twitter.com/rgerhards
NOTE WELL: This is a PUBLIC mailing list, posts are ARCHIVED by a myriad of 
sites beyond our control. PLEASE UNSUBSCRIBE and DO NOT POST if you DON'T LIKE 
THAT.

Reply via email to