On 15 May 2014, at 11:12, Arran Cudbard-Bell <a.cudbardb@freeradius.org> wrote:
On 15 May 2014, at 01:24, Brendan Kearney <bpk678@gmail.com> wrote:
i am evaluating FR 3.0.1 with kerberos/ldap for authN/authZ, respectively. for some reason, the kerberos piece is not authenticating me. the keytab is freshly minted and the kvno in it matches what is in kadmin. the keytab is owned by radiusd:radiusd. kinit -kt /etc/raddb/radius.keytab radius/test.bpk2.com results in a ticket being granted. not sure what the issue is. can anyone offer a pointer?
Try 3.0.3, there have been some fixes since 3.0.1.
Though you also need to make sure there's a keytab entry for your service principle. Arran Cudbard-Bell <a.cudbardb@freeradius.org> FreeRADIUS Development Team FD31 3077 42EC 7FCD 32FE 5EE2 56CF 27F9 30A8 CAA2