Re: LDAP Client & Server with Kerberos

I am using cyrus-sasl-2.1.18 and doing build by using following command :-

./configure --enable-gssapi=/usr/lib/ < /usr/lib have kerberos & GSSAPI library >
make
make install

Is cyrus-sasl-2.1.18 appropriate SASL mechansisms package??? if no then which
sasl should i use??

built cyrus-sasl against a Kerberos implementation means :-
do we need some option for build it ?? if yes then please this share with me.

Thanks,
Sanjay

----- Original Message ----
From: Quanah Gibson-Mount <quanah@zimbra.com>
To: sanjay gupta <sanjay_cs1983@yahoo.com>; openldap-software@openldap.org
Sent: Monday, January 7, 2008 10:36:04 PM
Subject: Re: LDAP Client & Server with Kerberos

--On January 7, 2008 12:06:40 AM -0800 sanjay gupta
<sanjay_cs1983@yahoo.com> wrote:

>
>
>
> ldapsearch with debugging enabled and see what it's doing :-
>
> [root@localhost tools]# ./ldapsearch -Y GSSAPI -d 1
> ldap_create
> ldap_sasl_interactive_bind_s: user selected: GSSAPI
> ldap_int_sasl_bind: GSSAPI
> ldap_new_connection 1 1 0
> ldap_int_open_connection
> ldap_connect_to_host: TCP 127.0.0.1:389
> ldap_new_socket: 3
> ldap_prepare_socket: 3
> ldap_connect_to_host: Trying 127.0.0.1:389
> ldap_connect_timeout: fd: 3 tm: -1 async: 0
> ldap_int_sasl_open: host=localhost.localdomain
> ldap_perror
> ldap_sasl_interactive_bind_s: Unknown authentication method (-6)
> additional info: SASL(-4): no mechanism available: No worthy
> mechs found
>
> It seems that LDAP server has not GSSAPI available.
>
> So how can we add GSSAPI support in LDAP server for making it work??

SASL mechanism support is determined by what mechanisms Cyrus-sasl has
available to it. Install the appropriate SASL mechansisms package on your
particular distribution, or if you are building it yourself, make sure
you've built cyrus-sasl against a Kerberos implementation.

--Quanah

--

Quanah Gibson-Mount
Principal Software Engineer
Zimbra, Inc
--------------------
Zimbra :: the leader in open source messaging and collaboration