[Date Prev][Date Next] [Chronological] [Thread] [Top]

Re: SASL/GSSAPI auth stops working after slapd restart

--On Wednesday, March 10, 2004 6:46 PM +0100 denis.havlik@t-mobile.at wrote:

I'm testing this on rather standard Mandrake Linux 9.2 install, with
following software installed:

cyrus-SASL  v2.1.15
OpenLDAP v2.1.22
(MIT) Kerberos v1.3

I say this, repeatedly... OpenLDAP should not be used on the server side with MIT KRB5, because MIT KRB5 is very broken in relation to threading. I will also note that OpenLDAP 2.1.22 is old and was rather problematic, and there have been a lot of bug fixes since then.

I suggest you
A) Upgrade to a recent server version
B) Compile your server against Heimdal


Quanah Gibson-Mount
Principal Software Developer
ITSS/TSS/Computing Systems
ITSS/TSS/Infrastructure Operations
Stanford University
GnuPG Public Key: http://www.stanford.edu/~quanah/pgp.html