Adam Gray <adam@xxxxxxxxxxxxx> schreibte:
libvirt/my.fully.qualified.domain@xxxxxxxxxxxx (has a dash fwiw) and pointed SASL2 and libvirt at /etc/krb5.keytab
What tells your KDC? Have a look at klist -t /etc/krb5.keytaband look whether the principals match (e.g LIBVIRT/domain is not equal libvirt/domain
Ralf