[Freeipa-devel] GSSAPI Authorization error while trying to add a group

Karl MacMillan kmacmill at redhat.com
Tue Nov 6 12:52:20 UTC 2007


On Tue, 2007-11-06 at 18:11 +1000, David O'Brien wrote:
> Using freeipa-server from the 2007-11-05_10_07-build, I tried to add a
> group:
> Name: engineering
> Description: all engineering dept. members
> 
> and got the following:
> 
> Group add failed: GSSAPI Authorization error
> {'info': 'SASL(-1): generic failure: GSSAPI Error: Unspecified GSS
> failure. Minor code may provide more information
> (No such file or diectory)', 'desc':'Invalid credentials'}
> 
> I'm logged in as admin. I'm trying to do this via the web interface.
> haven't tried the commandline tools yet.
> 
> I also tried with no description and got the same result. I didn't try
> to add any members (haven't created any users yet).
> 
> anyone else seen/tried this?
> 

Do you verify that all your packages are updated as it says in
http://freeipa.org/page/QuickInstall? Particularly PyKerberos and
mod_auth_kerb.

Are the client and server on the same host? What does hostname return?

Can you search for users successfully?

Os version / arch?

Karl




More information about the Freeipa-devel mailing list