[Date Prev][Date Next] [Chronological] [Thread] [Top]

Re: (ITS#4102) ITS 4064 seems to break sasl/gssapi binds to AD



Kyle_Chapman@G1.com wrote:
> i can say that in 2000 as well as 2003, AD behaves the same with this particular issue.  2003AD supports digest-md5 (i didnt know that) and that works fine with all the recent changes to cyrus.c...
>
> would it be fair to say the easiest fix for now is to send a note to MS and for folks who need sasl/gssapi support with AD, should make a slight change (at least it is now) to cyrus.c??
>   

That sounds reasonable to me.

Too bad the API doesn't define an error code for protocol errors 
detected on the client side. LOCAL_ERROR seems a bit too vague...

-- 
  -- Howard Chu
  Chief Architect, Symas Corp.  http://www.symas.com
  Director, Highland Sun        http://highlandsun.com/hyc
  OpenLDAP Core Team            http://www.openldap.org/project/