Hi Francesco, > I tested GSSAPI auth with a samba-4.1.2 active directory server.
I have tested on my side, thanks to your tutorial. But seems to fails on my side : $ bin/lsc -f etc -c all -s all -n Dec 10 15:25:11 - DEBUG - Loading XML configuration from: /home/sadm/lsc-openldap2ad/etc/lsc.xml Dec 10 15:25:12 - INFO - Reflections took 222 ms to scan 1 urls, producing 51 keys and 103 values Dec 10 15:25:12 - DEBUG - Importing XML schema file: schemas/lsc-core-2.0.xsd Dec 10 15:25:12 - INFO - Logging configuration successfully loaded from /home/sadm/lsc-openldap2ad/etc/logback.xml Dec 10 15:25:12 - INFO - LSC configuration successfully loaded from /home/sadm/lsc-openldap2ad/etc/ Dec 10 15:25:13 - INFO - Connecting to LDAP server ldaps://samba-ad1.horizon.test:636/dc=horizon,dc=test as [email protected] Dec 10 15:25:13 - ERROR - Error opening the LDAP connection to the destination! (javax.naming.AuthenticationException: GSSAPI [Root exception is javax.security.sasl.SaslException: GSS initiate failed [Caused by GSSException: No valid credentials provided (Mechanism level: Attempt to obtain new INITIATE credentials failed! (null))]]) Dec 10 15:25:13 - ERROR - org.lsc.exception.LscConfigurationException: java.lang.reflect.InvocationTargetException even if klist give me the rights values : $ klist Ticket cache: FILE:/tmp/krb5cc_1000 Default principal: [email protected] Valid starting Expires Service principal 12/10/13 14:43:20 12/11/13 00:43:20 krbtgt/[email protected] renew until 12/11/13 11:45:52 Is there anything I forgot ? Regards, -- Xavier Beaudouin - Senior Network and System Administrator Infrastructure and network director Horizon Software - http://www.hsoftware.com/ 13 rue La Fayette - 75009 PARIS - France Phone: +33 (0)1 4260 9490 Fax: +33 (0)1 44 56 97 01 Why Top posting is bad : http://ck.wikia.com/wiki/TopPosting _______________________________________________________________ Ldap Synchronization Connector (LSC) - http://lsc-project.org lsc-users mailing list [email protected] http://lists.lsc-project.org/listinfo/lsc-users
