> -----Original Message-----
> From: kerberos-bounces@mit.edu
> [mailto:kerberos-bounces@mit.edu] On Behalf Of Ronni Feldt
> Sent: Thursday, October 30, 2008 5:37 PM
> To: kerberos@mit.edu
> Subject: Kerberos and LDAP
>
> Hi,
>
> Im still trying to get this to work.
>
> Server: Debian Etch (3 hostnames=lookout, ldap and kerberos,
> ip=192.168.212.15)
> Workstation: Ubuntu 8.04 (hostname=rofe.one.com, ip=192.168.212.93)
>
> I have followed the following guides:
> http://techpubs.spinlocksolutions.co.../kerberos.html
> http://techpubs.spinlocksolutions.com/dklar/ldap.html
>
> Created my own user "ronni" the same way as the user "mirko" is.
>
> >From my workstation I can do:

> kinit ronni
> ldapsearch -x
> which both work.


When you run ldapsearch with "-x" option, it means the simple binding and does not need a kerberos ticket. So your previous "kinit" command is redundant.

You need to test it without -x option to see whether it still works.

Just my 2 cents,
Xu Qiang