I'm sorry, but it looks like SSSD is having trouble reading /etc/krb5.keytab when msktutil has been run.

On a machine with a good keytab you get the following when issuing klist '/etc/krb5.keytab'
klist: End of credential cache reached



On 5 January 2016 at 11:24, John Hodrien <J.H.Hodrien@leeds.ac.uk> wrote:
On Tue, 5 Jan 2016, Andy Airey wrote:


I am getting the same errors in syslog on CentOS 6.7 and 7.1.

When I issue a plain 'klist /etc/krb5.keytab' I get the following:

klist: Bad format in credentials cache

However 'klist -ke' and the like are working, I was wondering if you are
seeing the same Neil?
Maybe because of this bad format, sssd cannot read it and thus it is an
msktutil issue?
Maybe we can circumvent this by using some option with msktutil?

That's not in any way broken, surely?

klist -k some.keytab
klist some.keycache
klist -c some.keycache

The output of kinit is a cache, the contents of a keytab are not.


sssd-users mailing list