>#klist
>Ticket cache: FILE:/tmp/krb5cc_0
>Default principal: [EMAIL PROTECTED]
>
>#ldapsearch -Y GSSAPI -D "uid=bsmith,ou=People,dc=afb,dc=lan" -v 

No credentials??  or did you just edit out the result of klist?  You should see 
at the very least a ticket-granting ticket

>2. Do I need a host principal for every client?
>

This I am pretty sure is a 'yes you do'


-Marty

--
Fedora-directory-users mailing list
[email protected]
https://www.redhat.com/mailman/listinfo/fedora-directory-users

Reply via email to