Re: change related to its 4046 seems to break sasl/gssapi working with AD

[Howard Chu <hyc@symas.com>]

Quanah Gibson-Mount wrote:
> --On Wednesday, October 19, 2005 3:13 PM -0400 "Chapman, Kyle" 
> <Kyle_Chapman@G1.com> wrote:
>
> > im not sure this is a legit problem or an issue with how MS deals with
> > sasl/gssapi...
> >
> > changes for cyrus.c 1.112.2.6 to 1.112.2.7 break sasl/gssapi binds to AD
> > (vers 2.3.8 and up, at least for me).  if i roll back to 1.112.2.6 in
> > 2.3.11, everything builds ok and ldapsearch/sasl/gssapi to AD work.
> > looking at the diff, there is memory cleanup as well as some changes to
> > checking the values provided by scred following a call to
> > ldap_sasl_bind_s.  adding back in the mem cleanup and the first reorder
> > of the if statements and rebuilding, sasl/gssapi still works.   changing
> > the second if statement results in (this change is after seeing if 
> > the rc
> > and saslrc are OK):
>
> You should follow up to the ITS if you want anyone to look at this.  
> Posts to the openldap-software list are seen as purely informational.
ITS#4046 doesn't seem to be the right number.

--
 -- Howard Chu
 Chief Architect, Symas Corp.  http://www.symas.com
 Director, Highland Sun        http://highlandsun.com/hyc
 OpenLDAP Core Team            http://www.openldap.org/project/