[Date Prev][Date Next] [Chronological] [Thread] [Top]

Re: ldap SASL GSSAPI , unknown authorization mechanism

--On Sunday, November 20, 2005 4:20 PM +0200 Amir Saad <Amir.Saad@bibalex.org> wrote:

i use Fedora 4, ldap 2.3.11 , cyrus-sasl-2.1.19 , MIT Kerberos 5
i tried to run the command:
 ldapsearch -Y GSSAPI -b '' -s base '(objectclass=*)' namingContexts
but i got the following error:
        ldap_sasl_interactive_bind_s: Unknown authentication method (-6)
        additional info: SASL(-4): no mechanism available: No worthy
mechs found although i installed MIT Kerberos 5 then i installed the
cyrus-sasl-2.1.19  and both installed successfully... i hope u can help

Was openldap build to be linked against that software? And MIT's Kerberos implementation is horribly slow. If you plan on using SASL/GSSAPI with your LDAP server, I suggest using Heimdal kerberos.


Quanah Gibson-Mount
Principal Software Developer
ITSS/Shared Services
Stanford University
GnuPG Public Key: http://www.stanford.edu/~quanah/pgp.html