[Engine-devel] OpenLdap and Kerberos for oVirt on f19

[Piotr Kliczewski]

Hello everyone,

I working on configuring OpenLdap 2.4.36 with kerberos for oVirt running on f19.

I follow following instruction:
https://bugzilla.redhat.com/show_bug.cgi?id=967327#c5

Please note that the instruction was written for f18. In order to have
step 18 working from
command line I had to set SASL_NOCANON to off. The reason was that I got:

ldap_sasl_interactive_bind_s: Invalid credentials (49)
additional info: SASL(-13): authentication failure: GSSAPI Failure:
gss_accept_sec_context

When SASL_NOCANON is off I can search the ldap but have the same issue
from java code:

I got javax.naming.AuthenticationException: [LDAP: error code 49 -
SASL(-13): authentication failure: GSSAPI Failure:
gss_accept_sec_context].
Have this when connecting using engine-manage-domains
(http://gerrit.ovirt.org/gitweb?p=ovirt-engine.git;a=blob;f=backend/manager/modules/utils/src/main/java/org/ovirt/engine/core/utils/kerberos/JndiAction.java;h=467d64cb03523ba7e5144a57d6a60428f039656f;hb=refs/heads/master
line 84).

Can you please point me where is my config issue?

I copied engine-devel for reference.

Thanks,
Piotr