[Date Prev][Date Next] [Chronological] [Thread] [Top]

Re: (ITS#8206) ldapsearch incorrectly cannonicalizes dns names for GSSAPI

cwinkows@vt.edu wrote:
> When using ldapsearch GSSAPI mechanism with a server whose reverse DNS name
> doesn't match its DNS name, ldapsearch will do the DNS lookups and hand the
> reverse DNS entry to GSSAPI. If the reverse DNS entry is not what is used by
> kerberos then kerberos will fail.

Did you already try with -N?

$ ldapsearch -h
  -N         do not use reverse DNS to canonicalize SASL host name

Ciao, Michael.