In a Debian GNU/Linux environment, I am not able to have SASL work with kerberos:
sudo /usr/sbin/sasl-sample-server -m GSSAPI -s ldap Forcing use of mechanism GSSAPI Sending list of 1 mechanism(s) S: R1NTQVBJ Waiting for client mechanism... C: [...a lot of lines trimmed...] got 'GSSAPI' sasl-sample-server: SASL Other: GSSAPI Error: No credentials were supplied, or the credentials were unavailable or inaccessible. (unknown mech-code 0 for mech unknown) sasl-sample-server: Starting SASL negotiation: generic failure (generic failure)
Documentation says it's the service that can't access keytab.
- sasl-sample-server is run by root, so there shuldn't be any permission issues;
- checking the command with
straceI can confirm the file
I am running out of ideas: what should I check now?
The message error is two-folded: I checked mainly the
or the credentials were unavailable or inaccessible part; what does the
No credentials were supplied part mean?