[Freeipa-users] Inappropriate authentication when binding as service account

[Joyce Babu]

Hello,

I am trying to bind to ldap as a service account. I followed the advice in

https://lists.fedorahosted.org/archives/list/[e-mail]...

and created a plain text password using ipa-getkeytab

ipa-getkeytab -s ipa.ennexa.org -p HTTP/service.domain.tld(a)EXAMPLE.COM -P
-k /tmp/test.keytab

But when I try to bind with the same password, it is failing

ldapsearch -D
krbprincipalname=HTTP/service.domain.tld(a)EXAMPLE.COM,cn=services,cn=accounts,dc=example,dc=com
-w "MY_PLAIN_TEXT_PASSWORD" -b cn=groups,cn=accounts,dc=example,dc=com -h
ipa.example.com:389
ldap_bind: Inappropriate authentication (48)

Do I have to configure anything else?

Thanks & Regards,
Joyce Babu