[cvsnt] Re: Gssapi and Active Directory

[Tony Hoyle]

Koch-Luerding, Rainer RD-AS5 wrote:
> Hello list.
> 
> Is there someone who uses gssapi (:gserver:) with Active directory ?
> And can tell me how to configure it?
> 
> The environment :
> Cvsnt-Server is W2K an release 2.0.58d, Clients are under Redhat Linux
> Ver 7 an 9 an WinXP.
> 
> The UNIX error messages are
> Cvs ls: GSSAPI authentication failed: Miscellaneous failure
> Cvs [ls aborted]:GSSAPI authentication failed: Server not found in
> kerberos database
>
Unix kerberos configuration is a bit of an art... it's not something I 
can really help with as I've only had it working maybe once :)  FYI I 
get the exact same error when I try from Unix at the moment.

Make sure that you can kinit at least, and that the host is in the keytab.

> It doesn't work under Windows clients, too.

It'll work without any extra configuration, provided all Windows users 
are logged into the same active directory (not locally).

Tony