On 02/10/2024 14:11, Jan Wagner via FreeIPA-users wrote:
Hey,
I've encountered a replication issue, due to replica not being able to
construct gss context.
The result is, that I cannot bind to the replica (let's call it replica1) using
gssapi and other replicas cannot establish replication.
The directory logs are full of the following:
```
[02/Oct/2024:13:28:46.834250430 +0200] - DEBUG - NSMMReplicationPlugin -
bind_and_check_pwp - agmt="cn=meToreplica2.example.com" (replica2:389) -
Replication bind with GSSAPI auth failed: LDAP error -2 (Local error) (SASL(-1): generic
failure: GSSAPI Error: No credentials were supplied, or the credentials were unavailable
or inaccessible (No Kerberos credentials available (default cache: KCM:)))
```
I'd double check the owner/mode/context of /etc/dirsrv and
/etc/dirsrv/ds.keytab, & check if SELinux policy is preventing dirsrv
from reading by running 'ausearch -i -m avc'.
--
Sam Morris <https://robots.org.uk/>
PGP: rsa4096/CAAA AA1A CA69 A83A 892B 1855 D20B 4202 5CDA 27B9
--
_______________________________________________
FreeIPA-users mailing list -- [email protected]
To unsubscribe send an email to [email protected]
Fedora Code of Conduct:
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives:
https://lists.fedorahosted.org/archives/list/[email protected]
Do not reply to spam, report it:
https://pagure.io/fedora-infrastructure/new_issue
