Hello,
I enabled krb5 in my audisp-remote and audispd-remote reports "GSS-API
error sending token length" and fails to log remotely.
If I reboot the destination auditd server AFTER the clients are running
it appears to work. But if I reboot any clients machine, logging from
that rebooted machine fails.
I created my service principals using freeipa - all systems are clean
installs of Centos 7.2.
For now, I disabled krb5, but that is not a good solution.
Thank you,
Ken