[Date Prev][Date Next] [Chronological] [Thread] [Top]

Re: SASL required? for Heimdal Kerberos -> OpenLDAP

To: Bruce Marriner <bmarriner@appss.com>
Subject: Re: SASL required? for Heimdal Kerberos -> OpenLDAP
From: "Kurt D. Zeilenga" <Kurt@OpenLDAP.org>
Date: Wed, 13 Oct 2004 11:57:41 -0700
Cc: OpenLDAP software list <openldap-software@OpenLDAP.org>
In-reply-to: <416D75C6.5030807@appss.com>
References: <2BF615FBFB12BB47B6501D04376E657A0B0A9D@MAILFS1.uta.edu> <416C4095.2080800@sys-net.it> <302602B2101B5139D594F344@cadabra.stanford.edu> <416D75C6.5030807@appss.com>

At 11:36 AM 10/13/2004, Bruce Marriner wrote:
> I am trying to get Heimdal Kereros setup to use OpenLDAP as a database store for it's passwords.  I have OpenLDAP 2.0.27 installed and Heimdal 0.6.2-20040927 snapshot compiled with OpenLDAP support.   When I attempt to initialize my Kerberos domain I get an error : hdb_open: ldap_sasl_bind_s: Can't contact LDAP server.  So I learned that normally people seem to use SASL to implement this.  I would like to know if there is a method of configuring all this so SASL is not required?  Also in doing that would there be some risks to consider?

Your question should be directed to a list covering
issues with Heimdal's LDAP backend, hdb-ldap, such
as <<mailto:heimdal-discuss@sics.se>heimdal-discuss@sics.se>.

Kurt

PS: OpenLDAP 2.0 (and 2.1) are historic.  You should
consider upgrading.

References:
- Tricky ACL
  - From: "Kasundra, Digant" <digant@uta.edu>
- Re: Tricky ACL
  - From: Pierangelo Masarati <ando@sys-net.it>
- Re: Tricky ACL
  - From: Quanah Gibson-Mount <quanah@stanford.edu>
- SASL required? for Heimdal Kerberos -> OpenLDAP
  - From: Bruce Marriner <bmarriner@appss.com>

Prev by Date: SASL required? for Heimdal Kerberos -> OpenLDAP
Next by Date: Re: SASL required? for Heimdal Kerberos -> OpenLDAP
Index(es):
- Chronological
- Thread