Adam Gray <adam(a)meebo-inc.com> schreibte:
libvirt/my.fully.qualified.domain(a)MY-REALM.COM (has a dash fwiw) and
pointed SASL2 and libvirt at /etc/krb5.keytab
What tells your KDC?
Have a look at
klist -t /etc/krb5.keytab
and look whether the principals match (e.g LIBVIRT/domain is not equal
libvirt/domain
Ralf