[Date Prev][Date Next] [Chronological] [Thread] [Top]

Re: SASL/GSSAPI auth stops working after slapd restart

To: denis.havlik@t-mobile.at, openldap-software@OpenLDAP.org
Subject: Re: SASL/GSSAPI auth stops working after slapd restart
From: Quanah Gibson-Mount <quanah@stanford.edu>
Date: Wed, 10 Mar 2004 11:32:08 -0800
Content-disposition: inline
In-reply-to: <OF9419583D.7E389FC2-ONC1256E53.0060666B-C1256E53.0061AC52@t-mobile.at>
References: <OF9419583D.7E389FC2-ONC1256E53.0060666B-C1256E53.0061AC52@t-mob ile.at>

--On Wednesday, March 10, 2004 6:46 PM +0100 denis.havlik@t-mobile.at wrote:

I'm testing this on rather standard Mandrake Linux 9.2 install, with
following software installed:

cyrus-SASL  v2.1.15
OpenLDAP v2.1.22
(MIT) Kerberos v1.3

I say this, repeatedly... OpenLDAP should not be used on the server side with MIT KRB5, because MIT KRB5 is very broken in relation to threading. I will also note that OpenLDAP 2.1.22 is old and was rather problematic, and there have been a lot of bug fixes since then.

I suggest you
A) Upgrade to a recent server version
B) Compile your server against Heimdal

--Quanah

--
Quanah Gibson-Mount
Principal Software Developer
ITSS/TSS/Computing Systems
ITSS/TSS/Infrastructure Operations
Stanford University
GnuPG Public Key: http://www.stanford.edu/~quanah/pgp.html

References:
- SASL/GSSAPI auth stops working after slapd restart
  - From: denis.havlik@t-mobile.at

Prev by Date: RE: ACL questions. Answered (long)
Next by Date: Re: Problem with ACL and regex
Index(es):
- Chronological
- Thread