[Date Prev][Date Next]
Re: errant SASL/GSSAPI setup?
--On Wednesday, August 30, 2006 8:24 AM -0700 Quanah Gibson-Mount
--On Wednesday, August 30, 2006 10:19 AM -0400 "Allan E. Johannesen"
I've been using rootdn passwords over TLS with slurpd and since switching
to syncrepl. Seeing a posting by Quanah Gibson-Mount
<email@example.com> some weeks ago about k5start and KRB5CCNAME, I was
inspired to try to make the switch.
I grabbed kstart-3.5 and installed it and installed a sasl-regexp in the
So far, everything looks good. An update went through and the ldap
ticket was established. However, after the ticket expires, a subsequent
update does not take place and a new ldap ticket isn't obtained.
I'd take a look at why you haven't set up kstart to continually refresh
the ticket, so that it never expires... That's part of the point of using
See daemontools. Here is the ticket I use with daemontools to
Principal Software Developer
ITS/Shared Application Services
GnuPG Public Key: http://www.stanford.edu/~quanah/pgp.html