[Date Prev][Date Next] [Chronological] [Thread] [Top]

Re: GSSAPI auth missing?

To: Pat Riehecky <prieheck@iwu.edu>
Subject: Re: GSSAPI auth missing?
From: Michael Ströder <michael@stroeder.com>
Date: Thu, 14 Feb 2008 11:24:30 +0100
Cc: openldap-software@openldap.org
In-reply-to: <1202928227.6240.87.camel@thales>
References: <1202928227.6240.87.camel@thales>
User-agent: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.8.1.11) Gecko/20071128 SeaMonkey/1.1.7

Pat Riehecky wrote:

I was about to configure kerberos connections to my test OpenLDAP system
(2.4.7, debian sid packages) when I discovered an oddity....

# ldapsearch -x -b "" -s base -LLL supportedSASLMechanisms
dn:
supportedSASLMechanisms: CRAM-MD5
supportedSASLMechanisms: DIGEST-MD5
supportedSASLMechanisms: LOGIN
supportedSASLMechanisms: PLAIN
supportedSASLMechanisms: NTLM

I don't see GSSAPI in the list.

Probably your SASL installation does not have the GSSAPI plugin installed (check for /usr/lib/sasl2/*gssapi*) or the required Kerberos libs are also missing.

Ciao, Michael.

References:
- GSSAPI auth missing?
  - From: Pat Riehecky <prieheck@iwu.edu>

Prev by Date: Re: openldap and tls
Next by Date: Re: Restricted/controlled simple bind
Index(es):
- Chronological
- Thread