Thanks Ralf, sadly things look OK to me. Did I typo something?? haha forward and reverse DNS are correct for this host (petey), too. As far as I can tell Kerberos stuff is set up as usual.
r...@petey:~# klist -k /etc/krb5.keytab Keytab name: WRFILE:/etc/krb5.keytab KVNO Principal ---- -------------------------------------------------------------------------- 2 libvirt/petey.mydomain....@mydomain-inc.com 2 libvirt/petey.mydomain....@mydomain-inc.com 2 libvirt/petey.mydomain....@mydomain-inc.com 2 libvirt/petey.mydomain....@mydomain-inc.com -adam On Wed, Jun 30, 2010 at 07:37, Ralf Hornik Mailings <r...@best.homeunix.org> wrote: > Adam Gray <a...@meebo-inc.com> schreibte: > >> libvirt/my.fully.qualified.dom...@my-realm.com (has a dash fwiw) and >> pointed SASL2 and libvirt at /etc/krb5.keytab > > What tells your KDC? > > Have a look at > > klist -t /etc/krb5.keytab > > and look whether the principals match (e.g LIBVIRT/domain is not equal > libvirt/domain > > Ralf > > > _______________________________________________ libvirt-users mailing list libvirt-users@redhat.com https://www.redhat.com/mailman/listinfo/libvirt-users