Hi folks, Platform: freeipa 4.2 (Centos7)
Problem: My cron job needs a ticket to run ldapsearch. The error message is: SASL/GSSAPI authentication started ldap_sasl_interactive_bind_s: Local error (-2) additional info: SASL(-1): generic failure: GSSAPI Error: Unspecified GSS failure. Minor code may provide more information (No Kerberos credentials available) Google pointed me to this solution http://www.cmf.nrl.navy.mil/krb/kerberos-faq.html#kerbcron I wonder what is the "freeipa way" to handle this scenario, esp. how to generate the additional kerberos entry without confusing FreeIPA? Maybe I am too blind to see, but I haven't found this problem in the FAQs. Every helpful comment is highly appreciated. Harri -- Manage your subscription for the Freeipa-users mailing list: https://www.redhat.com/mailman/listinfo/freeipa-users Go to http://freeipa.org for more info on the project