I'm trying to debug a script that is supposed to auto-setup kerberos for
Hadoop. Its not working, and I've boiled down the problem to the fact that
for some reason, it wants to use DES as the encryption type. There is no
good reason for this, since both freeIPA and Hadoop support modern
I suddenly started getting errors when I try to use ipa-getkeytab:
[root@ipa1 kerberize]# ipa-getkeytab -s jn01 -p hdfs/jn01 -k
jn01.hdfs.keytab
SASL Bind failed Can't contact LDAP server (-1) !
ldap seems to be answering on the non-SASL port (ei: ldapsearch -x -h
localhost CN=richard works
