>#klist >Ticket cache: FILE:/tmp/krb5cc_0 >Default principal: bsmith@xxxxxxx > >#ldapsearch -Y GSSAPI -D "uid=bsmith,ou=People,dc=afb,dc=lan" -v No credentials?? or did you just edit out the result of klist? You should see at the very least a ticket-granting ticket >2. Do I need a host principal for every client? > This I am pretty sure is a 'yes you do' -Marty -- Fedora-directory-users mailing list Fedora-directory-users@xxxxxxxxxx https://www.redhat.com/mailman/listinfo/fedora-directory-users