[Date Prev][Date Next] [Chronological] [Thread] [Top]

Re: problems compiling with kerberos support



Hi there,

still on going........ but nearly there:-)

The GSSAPI side of my problem is a little off topic for this list (though related), but I can't seem
to get any help from any other source (or can someone recommend?). Right I have GSSAPI
support now, but I seem to get an error when the tickets are passed to kerberos:


74 alexs@bernard% !./sa
./sample-server -m GSSAPI -p ../plugins/.libs -s ldap
Forcing use of mechanism GSSAPI
Sending list of 1 mechanism(s)
S: R1NTQVBJ
Waiting for client mechanism...

37 alexs@bernard% strace ./sample-client -m GSSAPI -p ../plugins/.libs -u alexs -n bernard.bluewave.com
.
.
.
socket(PF_INET, SOCK_DGRAM, IPPROTO_UDP) = 3
connect(3, {sin_family=AF_INET, sin_port=htons(88), sin_addr=inet_addr("195.152.6.224")}}, 16) = 0
send(3, "l\202\2\2410\202\2\235\241\3\2\1\5\242\3\2\1\f\243\202"..., 677, 0) = 677
select(4, [3], NULL, NULL, {3, 0}) = 1 (in [3], left {3, 0})
ioctl(3, FIONREAD, [140]) = 0
recv(3, "~\201\2110\201\206\240\3\2\1\5\241\3\2\1\36\244\21\30\017"..., 140, 0) = 140
close(3) = 0
write(2, "lt-sample-client: Starting SASL "..., 60lt-sample-client: Starting SASL negotiation: generic failure) = 60


Any ideas? hints? pointers? resources?

Thanks again,

Alex.

At 08:48 AM 10/24/00 -0700, you wrote:
At 11:17 AM 10/24/00 +0100, Alex Stepney wrote:
>51 alexs@bernard% ldapsearch -Y GSSAPI -b '' -s base '(objectclass=*)' ldap_sasl_interactive_bind_s: Unknown authentication method


Given the explicit mechanism specification, this error implies
that the client doesn't support GSSAPI.  That is Cyrus SASL
could not locate or load the it's GSSAPI pluggin.

Have you tested your GSSAPI build through use of Cyrus SASL's
sample client/server?   There are fairly decent instructions
for testing GSSAPI in Cyrus SASL's doc/gssapi.html.  Until
you've completed sample client/server testing, there is little
point in trying to debug OpenLDAP's use of Cyrus SASL.

Kurt

Alex Stepney - Systems Engineer alex.stepney@bluewave.com ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Bluewave Ltd - Online Creations http://www.bluewave.com Tel. +44 (0)20 7706 3500 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~