[Fedora-directory-users] FDS, Kerberos, SASL confusion

[MJD Shop Account]

>#klist
>Ticket cache: FILE:/tmp/krb5cc_0
>Default principal: bsmith at AFB.LAN
>
>#ldapsearch -Y GSSAPI -D "uid=bsmith,ou=People,dc=afb,dc=lan" -v 

No credentials??  or did you just edit out the result of klist?  You should see at the very least a ticket-granting ticket

>2. Do I need a host principal for every client?
>

This I am pretty sure is a 'yes you do'


-Marty