title: Gssapi+Freeipa+Python. Can't find client principal. But it exists. Why?
body: <p>What I do first:</p>
  
  <pre><code>&gt;kinit
  Default principal: bob@R1.COM
  
  Valid starting       Expires              Service principal
  18.06.2020 18:27:11  19.06.2020 18:26:26  postgres/c1.com.ru@R1.COM
  18.06.2020 18:27:11  19.06.2020 18:26:26  postgres/c1s.com.com@
  18.06.2020 18:26:30  19.06.2020 18:26:26  krbtgt/R1.COM@R1.COM
  </code></pre>
  
  <p>Ok. principal for "postgres/c1.com.ru@R1.COM" is exist.</p>
  
  <p>And second:</p>
  
  <pre><code>import gssapi
  
  p_name = 'postgres/c1.com.ru@R1.COM'
  name = gssapi.Name(p_name) #the principal for this service
  creds = gssapi.Credentials(name=name, usage='initiate')
  </code></pre>
  
  <p>And I get this error:</p>
  
  <pre><code>Traceback (most recent call last):
    File "gt1.py", line 8, in &lt;module&gt;
      creds = gssapi.Credentials(name=name, usage='initiate')
    File "/usr/lib/python2.7/dist-packages/gssapi/creds.py", line 64, in __new__
      store=store)
    File "/usr/lib/python2.7/dist-packages/gssapi/creds.py", line 137, in acquire
      mechs, usage)
    File "gssapi/raw/creds.pyx", line 158, in gssapi.raw.creds.acquire_cred (gssapi/raw/creds.c:2051)
  gssapi.raw.misc.GSSError: Major (851968): Unspecified GSS failure.  Minor code may provide more information, Minor (2529639053): Can't find client principal postgres/cu1s.rostelecom1.ru@ROSTELECOM1.RU in cache collection
  </code></pre>
  
  <p>Why can this happen? Any ideas? Please, I need help...</p>