[Date Prev][Date Next] [Chronological] [Thread] [Top]

Re: (ITS#4102) ITS 4064 seems to break sasl/gssapi binds to AD

Kyle_Chapman@G1.com wrote:
> i can say that in 2000 as well as 2003, AD behaves the same with this particular issue.  2003AD supports digest-md5 (i didnt know that) and that works fine with all the recent changes to cyrus.c...
> would it be fair to say the easiest fix for now is to send a note to MS and for folks who need sasl/gssapi support with AD, should make a slight change (at least it is now) to cyrus.c??

That sounds reasonable to me.

Too bad the API doesn't define an error code for protocol errors 
detected on the client side. LOCAL_ERROR seems a bit too vague...

  -- Howard Chu
  Chief Architect, Symas Corp.  http://www.symas.com
  Director, Highland Sun        http://highlandsun.com/hyc
  OpenLDAP Core Team            http://www.openldap.org/project/