RE:

["Howard Chu" <hyc@highlandsun.com>]

OpenLDAP 2.0 only supports Cyrus SASL 1.5.

  -- Howard Chu
  Chief Architect, Symas Corp.       Director, Highland Sun
  http://www.symas.com               http://highlandsun.com/hyc
  Symas: Premier OpenSource Development and Support 

> -----Original Message-----
> From: owner-openldap-software@OpenLDAP.org
> [mailto:owner-openldap-software@OpenLDAP.org]On Behalf Of Rodier Bernard
> Sent: Monday, June 17, 2002 5:13 AM
> To: openldap-software@OpenLDAP.org
> Subject: 
> 
> 
> Hi all,
> 
> I had intalled OpenLDAP and Kerberos on a box (Red Hat 7.3 with
> OpenLDAP-2.0.23 cyrus-sasl-2.1.2)
>  
> acually users can authenticate themselves on the system using 
> ldap (nss_ldap
> and pam_ldap). I can recieve tickets from kdc but I can't query ldap with
> SASL GSSAPI mechanism.
> 
> when I try directly on ldapserver
> 
> $ldapsearch -X -D "cn=root,dc=highdeal,dc=com"
> 
> i obtain the following answerd :
> 
>        SASL/GSSAPI authentication started
>        ldap_sasl_interactive_bind_s: Local error
> 
> and on a remote client, answer is:
> 
>        ldap_sasl_interactive_bind_s: Unknown authentication method
> 
> but i obtain the following with
> 
> $ldapsearch -h Maracas -x -b "" -s base -LLL supportedSASLMechanisms:
> dn:
> supportedSASLMechanisms: GSSAPI
> 
> thanks in advance
> 
> Bernard