#1693 ipa-client-install should set LDAPSASL_NOCANON when calling ipa-getkeytab
Closed: Fixed None Opened 12 years ago by dpal.

https://bugzilla.redhat.com/show_bug.cgi?id=732468

Description of problem:
ipa-client-install fails when A/PTR names do not match. It turned out that the fix is easy, just set an environment variable to disable reverse lookup when calling ipa-getkeytab. From bug 719060:

"When testing IPA on a network where A/PTR names do not match it turned out that
OpenLDAP/cyrus-sasl fail when using GSSAPI.

Reverse lookup can be disabled by enabling SASL_NOCANON in ldap.conf or by
setting LDAPSASL_NOCANON environmental variable."

Version-Release number of selected component (if applicable):
RHEL 6.1

Metadata Update from @dpal:
- Issue assigned to rcritten
- Issue set to the milestone: FreeIPA 2.1.1 (bug fixing)

7 years ago

Login to comment on this ticket.

Metadata