Re: SASL EXTERNAL & Debian

[François Beretti <francois.beretti@enatel.com>]

ms419@freezone.co.uk a écrit :

> The SASL EXTERNAL mechanism is working with OpenLDAP on my OS X 
> machine, but not on my Debian machines.
>
> ---
> but on either Debian machine, "ldapsearch -h gol -ZZ -Y EXTERNAL -s 
> base -b "" supportedSASLMechanisms":
> ---
> SASL/EXTERNAL authentication started
> ldap_sasl_interactive_bind_s: Unknown authentication method (86)
>         additional info: SASL(-4): no mechanism available:
> ---
>
> I'm running up-to-date versions of SASL and OpenLDAP:
> ---
> ii  libsasl2       2.1.18-4       Authentication abstraction library
> ii  slapd          2.1.29-2       OpenLDAP server (slapd)
> ---
>
> I suspect that, since the EXTERNAL mechanism is working with one 
> distribution (OS X) and not another (Debian), it must be compiled 
> differently in each case? I've been through the SASL installation 
> documentation, however, and can't figure out what's necessary to 
> enable the EXTERNAL mechanism.

Hello Jack,

I also have this bug. I believe that this is due to the fact that 
openldap on debian is compiled against gnutls, while your OSX's openldap 
must be compiled against openssl, and there must be a bug or a 
compatibility issue with gnutls. But I am not sure.

regards,

François

> Any help much appreciated!
>
> Thanks,
>
> Jack