[ldapext] Kerberos Integrity behavior

[John McMeeking <jmcmeek@us.ibm.com>]

I've been asked a question about the correctness of a particular server's
behavior with respect to LDAP messages and GSSAPI messages when Kerberos
integrity and confidentiality is used.  Can anyone comment on this?

A particular server appears to be sending both search response and
completion messages (i.e. multiple LDAP messages) in a single GSSAPI
message.  Other servers we have tested send a single LDAP message in each
GSSAPI message.

Are both of these behaviors correct?


Thanks,

John  McMeeking


_______________________________________________
Ldapext mailing list
Ldapext@ietf.org
https://www1.ietf.org/mailman/listinfo/ldapext