Re: LDAP Client & Server with Kerberos

[Donn Cave <donn@u.washington.edu>]

On Jan 4, 2008, at 1:15 PM, Tony Earnshaw wrote:

> sanjay gupta skrev, on 04-01-2008 15:46:
>
> > I have done default compilation for openldap-2.3.38 now trying to  
> > run ldap client (ldapsearch) with Kerberos
> > so that ldap client can use session ticket to perform the LDAP  
> > lookup on LDAP server.Please let me know
> > what required to make ldap client work with kerberos.
> > I did not see any option to compile & build openldap lib with  
> > kerberos support & when I do ldapsearch with -K
> > option it shows error *"ldapsearch: not compiled with Kerberos  
> > support".
>
> 1: What do 'ldd ldapsearch' and 'ldd slapd' show?

Actually don't think that's the immediate problem.  I predict that
your "ldapsearch -K" will print out the same error message, whether
it's built with Kerberos support or not.

Current Kerberos support means SASL GSSAPI -- we're interested in
the -Y option, not the -K option.

From there, of course it does need to be built with Kerberos support,
as well as Cyrus SASL.

	Donn Cave, donn@u.washington.edu