[Freeipa-users] sasl binding failed when running ipa-getkeytab

[Ivan Levchenko]

Hi All!

Installed ipa-client on a 64 bit os, (centos 5.2).

ipa-client install went fine, no errors, but when i ran ipa-getkeytab:

ipa-getkeytab -s master.mydomain.com -p host/client.mydomain.com.com
-k /etc/krb5.keytab

I get the following error message:
SASL Bind failed!

I can login using the ipa users, but I need to enter them manually...
What does this error mean? I checked on
http://freeipa.org/page/TroubleshootingGuide#Service_Principals , but
on the server, nothing appears like that in the logs.

On the client, in /var/log/messages, I found this:

ipa-getkeytab: No worthy mechs found

googling didn't help on this error...

Thanks in advance.

--

Best Regards,

Ivan Levchenko
levchenko.i at gmail.com