[Samba] openindiana GSSAPI failure to samba 4.6.6

[Greg Dickie]

Hi,

 We recently updated our AD servers to 4.6.6 and one of the things that
stopped working was our zfs server running illumos. The idmap daemon is
trying to bind to ldap using sasl/GSSAPI and is failing with

additional info: SASL(-1): generic failure: GSSAPI Error: Unspecified GSS
failure.  Minor code may provide more information (Client not found in
Kerberos database)

I think this is usually caused by DNS inconsistencies but everthing looks
fine and it was working before the upgrade.

klist shows tickets
and doing and ldapsearch on the command line using GSSAPI seems to work
fine.

Has anyone encountered this? Any idea how to debug?

Thanks,
Greg

-- 


Greg Dickie
just a guy
514-983-5400