Re: (ITS#5913) supportedSASLMechanisms EXTERNAL not Work

[ando@sys-net.it]

jarbas.peixoto@gmail.com wrote:
> Full_Name: Jarbas Peixoto Junior
> Version: 2.4.11
> OS: Debian Lenny
> URL: ftp://ftp.openldap.org/incoming/
> Submission from: (NULL) (200.152.43.195)
> 
> 
> I have two servers:
> 
>    * Server A: Debian Etch - Works Fine
> 
>    * Server B: Debian Lenny - Do not Works supportedSASLMechanisms EXTERNAL
> 
> In Server A I have:
> 
> # ldapsearch -v -H ldap://server-Etch -b "" -LLL -s base supportedSASLMechanisms
> -ZZ
> ldap_initialize( ldap://server-Etch )
> SASL/EXTERNAL authentication started
> SASL username: emailAddress=jarbas.peixoto@previdencia.gov.br,CN=jarbas.peixoto,OU=DATAPREV,O=Previdencia
> Social,L=Campo Grande,ST=Mato Grosso do Sul,C=BR
> SASL SSF: 0
> filter: (objectclass=*)
> requesting: supportedSASLMechanisms
> dn:
> supportedSASLMechanisms: PLAIN
> supportedSASLMechanisms: DIGEST-MD5
> supportedSASLMechanisms: LOGIN
> supportedSASLMechanisms: NTLM
> supportedSASLMechanisms: CRAM-MD5
> supportedSASLMechanisms: EXTERNAL
> 
> In Server B I have:
> 
> # ldapsearch -v -H ldap://server-Lenny -b "" -LLL -s base
> supportedSASLMechanisms -ZZ
> ldap_initialize( ldap://server-Lenny:389/??base )
> ldap_start_tls: Connect error (-11

^^^ start TLS is failing.  There is no evidence of a bug in the 
software; likely either the client or the server's TLS is misconfigured.

Please direct software usage questions to the openldap-software list.

p.


Ing. Pierangelo Masarati
OpenLDAP Core Team

SysNet s.r.l.
via Dossi, 8 - 27100 Pavia - ITALIA
http://www.sys-net.it
-----------------------------------
Office:  +39 02 23998309
Mobile:  +39 333 4963172
Fax:     +39 0382 476497
Email:   ando@sys-net.it
-----------------------------------