Re: [libvirt-users] SASL GSSAPI error "Key table entry not found"

2010-07-01 Thread Adam Gray
I'll try again from latest source tomorrow (or sometime soon). If that doesn't change anything, I'll repost. Thanks for your help! -adam On Wed, Jun 30, 2010 at 16:10, Adam Gray wrote: > On Wed, Jun 30, 2010 at 10:13, Daniel P. Berrange wrote: >> >> If changing the location in /etc/sasl2/libv

Re: [libvirt-users] SASL GSSAPI error "Key table entry not found"

2010-06-30 Thread Adam Gray
On Wed, Jun 30, 2010 at 10:13, Daniel P. Berrange wrote: > > If changing the location in /etc/sasl2/libvirt.conf doesn't > work then you likely have a broken kerberos/sasl library. > This works in latest versions, but for broken systems you > can workaround it by setting KRB5_KTNAME=/etc/libvirt/k

Re: [libvirt-users] SASL GSSAPI error "Key table entry not found"

2010-06-30 Thread Adam Gray
On Wed, Jun 30, 2010 at 10:01, Maximilian Wilhelm wrote: > > Do you have a host/ principal, too? > How baout the access right? Can libvrtd read this file? > Does it? (strace -f -ff -eopen libvirtd --listen) I added the host/ principal and still no dice :( [pid 2184] open("/etc/libvirt/krb5.keyt

Re: [libvirt-users] SASL GSSAPI error "Key table entry not found"

2010-06-30 Thread Daniel P. Berrange
On Mon, Jun 28, 2010 at 09:40:49AM -0700, Adam Gray wrote: > My server and client are running Ubuntu Lucid, libvirt-bin > 0.7.5-5ubuntu27, qemu-kvm-0.12.3+noroms-0ubuntu9 and I'm using > virt-viewer-0.0.3-6ubuntu7.xul19 or virt-manager-0.8.2-2ubuntu8 to > connect. I configured SASL2 to use GSSAPI f

Re: [libvirt-users] SASL GSSAPI error "Key table entry not found"

2010-06-30 Thread Maximilian Wilhelm
Anno domini 2010 Adam Gray scripsit: Hi! > Thanks Ralf, sadly things look OK to me. Did I typo something?? haha > forward and reverse DNS are correct for this host (petey), too. As far > as I can tell Kerberos stuff is set up as usual. > r...@petey:~# klist -k /etc/krb5.keytab > Keytab name: WRF

Re: [libvirt-users] SASL GSSAPI error "Key table entry not found"

2010-06-30 Thread Adam Gray
Thanks Ralf, sadly things look OK to me. Did I typo something?? haha forward and reverse DNS are correct for this host (petey), too. As far as I can tell Kerberos stuff is set up as usual. r...@petey:~# klist -k /etc/krb5.keytab Keytab name: WRFILE:/etc/krb5.keytab KVNO Principal

Re: [libvirt-users] SASL GSSAPI error "Key table entry not found"

2010-06-30 Thread Ralf Hornik Mailings
Adam Gray schreibte: libvirt/my.fully.qualified.dom...@my-realm.com (has a dash fwiw) and pointed SASL2 and libvirt at /etc/krb5.keytab What tells your KDC? Have a look at klist -t /etc/krb5.keytab and look whether the principals match (e.g LIBVIRT/domain is not equal libvirt/domain Ra

[libvirt-users] SASL GSSAPI error "Key table entry not found"

2010-06-30 Thread Adam Gray
My server and client are running Ubuntu Lucid, libvirt-bin 0.7.5-5ubuntu27, qemu-kvm-0.12.3+noroms-0ubuntu9 and I'm using virt-viewer-0.0.3-6ubuntu7.xul19 or virt-manager-0.8.2-2ubuntu8 to connect. I configured SASL2 to use GSSAPI for libvirt following the instructions in the libvirt docs, created