[Date Prev][Date Next] [Chronological] [Thread] [Top]

Re: GSSAPI auth missing?

Pat Riehecky skrev, on 13-02-2008 19:43:
I was about to configure kerberos connections to my test OpenLDAP system
(2.4.7, debian sid packages) when I discovered an oddity....

# ldapsearch -x -b "" -s base -LLL supportedSASLMechanisms
supportedSASLMechanisms: CRAM-MD5
supportedSASLMechanisms: DIGEST-MD5
supportedSASLMechanisms: LOGIN
supportedSASLMechanisms: PLAIN
supportedSASLMechanisms: NTLM

I don't see GSSAPI in the list.  My searching of the doc and google has
met with no real results.  What must I do to get GSSAPI added as a
supported mechanism?

1: See that you have libgssapiv2 dynamic libraries in /usr/lib/sasl2 or wherever Debian puts them;
2: reflect this in /the/same/path/slapd.conf. I have only digest- and cram-md5 and mine looks like:

auxprop_plugin: slapd
pwcheck_method: auxprop
mech_list: digest-md5 cram-md5

Not quite sure what this would be for gssapi, though ...



Tony Earnshaw
Email: tonni at hetnet dot nl