Questions on openldap and kerberos....

[Jean-Christophe Gay]

Le Mon, 7 Jan 2013 13:04:54 -0500,
John Tobin <jtobin at po-box.esu.edu> a écrit :

> The kdc, and this client [the ldapsearch] are both on the same
> machine. I assume both of these processes get their clock reading
> from a 'date' type function off of the [same] machine... How can one
> skew from the other? It's the same clock....
> 
> tob

After your ldapsearch command that fail, can you paste a klist result
please ? And maybe some of your krb5kdc.log file may be interesting.

-- 
Jean-Christophe Gay -- Université Paris Dauphine
Responsable de la Sécurité des Systèmes d'Information
Tel : 01 44 05 45 04
jean-christophe.gay at dauphine.fr