ldap search is looking at wrong kerberos ticket
Clash Royale CLAN TAG#URR8PPP
up vote
0
down vote
favorite
How can I specify the Kerberos ticket to use when running ldapsearch?
If it makes a difference, it shouldn't, I am running a Cygwin wrapped Windows machine.
Using the following:
$ kinit
Password for user@domain:
New ticket is stored in cache file C:Usersuserkrbrnd_user
Then trying a search, I am getting the following error:
$ ldapsearch.exe -Y GSSAPI -Q -H ldap://ldap_server/ -b "DC=x,DC=y,DC=z"
ldap_sasl_interactive_bind_s: Local error (-2)
additional info: SASL(-1): generic failure: GSSAPI Error: Unspecified GSS failure.
Minor code may provide more information
(No Kerberos credentials available (default cache: FILE:/tmp/krb5cc_28182241))
From the output, ldapserach appears to be looking at the ticket, /tmp/krb5cc_28182241 instead of the ticket that is stored in my users home directory.
Instead of moving my ticket to the tmp directory, how can I make the search command use the correct ticket?
ldap kerberos
asked May 18 at 15:20
Matt Clark
194111
add a comment |Â
up vote
0
down vote
favorite
How can I specify the Kerberos ticket to use when running ldapsearch?
If it makes a difference, it shouldn't, I am running a Cygwin wrapped Windows machine.
Using the following:
$ kinit
Password for user@domain:
New ticket is stored in cache file C:Usersuserkrbrnd_user
Then trying a search, I am getting the following error:
$ ldapsearch.exe -Y GSSAPI -Q -H ldap://ldap_server/ -b "DC=x,DC=y,DC=z"
ldap_sasl_interactive_bind_s: Local error (-2)
additional info: SASL(-1): generic failure: GSSAPI Error: Unspecified GSS failure.
Minor code may provide more information
(No Kerberos credentials available (default cache: FILE:/tmp/krb5cc_28182241))
From the output, ldapserach appears to be looking at the ticket, /tmp/krb5cc_28182241 instead of the ticket that is stored in my users home directory.
Instead of moving my ticket to the tmp directory, how can I make the search command use the correct ticket?
ldap kerberos
asked May 18 at 15:20
Matt Clark
194111
add a comment |Â
up vote
0
down vote
favorite
up vote
0
down vote
favorite
How can I specify the Kerberos ticket to use when running ldapsearch?
If it makes a difference, it shouldn't, I am running a Cygwin wrapped Windows machine.
Using the following:
$ kinit
Password for user@domain:
New ticket is stored in cache file C:Usersuserkrbrnd_user
Then trying a search, I am getting the following error:
$ ldapsearch.exe -Y GSSAPI -Q -H ldap://ldap_server/ -b "DC=x,DC=y,DC=z"
ldap_sasl_interactive_bind_s: Local error (-2)
additional info: SASL(-1): generic failure: GSSAPI Error: Unspecified GSS failure.
Minor code may provide more information
(No Kerberos credentials available (default cache: FILE:/tmp/krb5cc_28182241))
From the output, ldapserach appears to be looking at the ticket, /tmp/krb5cc_28182241 instead of the ticket that is stored in my users home directory.
Instead of moving my ticket to the tmp directory, how can I make the search command use the correct ticket?
ldap kerberos
asked May 18 at 15:20
Matt Clark
194111
How can I specify the Kerberos ticket to use when running ldapsearch?
If it makes a difference, it shouldn't, I am running a Cygwin wrapped Windows machine.
Using the following:
$ kinit
Password for user@domain:
New ticket is stored in cache file C:Usersuserkrbrnd_user
Then trying a search, I am getting the following error:
$ ldapsearch.exe -Y GSSAPI -Q -H ldap://ldap_server/ -b "DC=x,DC=y,DC=z"
ldap_sasl_interactive_bind_s: Local error (-2)
additional info: SASL(-1): generic failure: GSSAPI Error: Unspecified GSS failure.
Minor code may provide more information
(No Kerberos credentials available (default cache: FILE:/tmp/krb5cc_28182241))
From the output, ldapserach appears to be looking at the ticket, /tmp/krb5cc_28182241 instead of the ticket that is stored in my users home directory.
Instead of moving my ticket to the tmp directory, how can I make the search command use the correct ticket?
ldap kerberos
asked May 18 at 15:20
Matt Clark
194111
asked May 18 at 15:20
Matt Clark
194111
asked May 18 at 15:20
Matt Clark
194111
asked May 18 at 15:20
Matt Clark
194111
194111
add a comment |Â
add a comment |Â
active
oldest
votes
active
oldest
votes
active
oldest
votes
active
oldest
votes
active
oldest
votes
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
StackExchange.ready(
function ()
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2funix.stackexchange.com%2fquestions%2f444635%2fldap-search-is-looking-at-wrong-kerberos-ticket%23new-answer', 'question_page');
);
Post as a guest
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
