SASL Failure GSSAPI Unspecified GSS Failure

Question

Installed from scratch. Enabled "Open Directory" and created a regular user account. Unable to remotely login with ssh. Since then I have been trying every option with Workgroup manager.
At this point, I can't even get authenticated as diradmin. I don't even have the option to stop OpenDirectory. I can access without ssl, e.g.,
$ ldapsearch -v -x ldap://my.domain.com -b "dc=my,dc=domain,dc=com"
Note the -x, simple authentication. Both ldaps:// and no -x will fail.
Must I jump back to the command line utils to solve this?
Thanks,
Hank

Answer 1

Been there done that have the t-shirt.
Here is how I fixed it.
Go into Server Manager app.
Click on Open Directory on the left hand side.
Click on Settings at the top
Click on LDAP
I am assuming you are using SSL for your LDAP connections.
Uncheck "Enable SSL" and click Save
Wait 30 seconds
Check "Enable SSL" and make sure you reselect your SSL cert.
Click Save
Your GSSAPI error will be cured until the next time you reboot or start/stop LDAP.
Then just repeat the process above.
Hope that helps.
Another sympton of the GSSAPI error (Key table entry not found) is that your diradmin user will NOT be able to authenticate!
That's pretty awesome (end sarcasm) and I wish APPLE WOULD FIX THIS as it took a lot of trial and error to figure this out.
FWIW, I'm using a Go Daddy SSL cert which also requires an intermediate cert.