[Samba] ldbsearch/kerberos issue

[steve]

On 13/07/12 17:35, Steve Thompson wrote:
> Samba 4.0.0beta3, CentOS 6.2
>
> I can successfully perform an ldbsearch on the Samba ldb by specifying
> the -U parameter:
>
>    # ldbsearch -H ldap://<hostname> -U <username>
>
> and while I can kinit successfully, I cannot use the resulting ticket to
> connect:
>
>    # ldbsearch -H ldap://<hostname> --kerberos=yes
> --krb5-ccache=/tmp/krb5cc_0
>    Failed to bind - LDAP client internal error: NT_STATUS_INVALID_PARAMETER
>    Failed to connect to 'ldap://<name>' with backend 'ldap': (null)
>    Failed to connect to ldap://<name> - (null)
>
> Would appreciate a clue.
>
> Steve
>
Hi Steve
/tmp/krb5cc_0 is root's cache. Are you issuing the command as root?
Cheers,
Steve