Re: GSSAPI auth missing?

[Tony Earnshaw <tonni@hetnet.nl>]

Pat Riehecky skrev, on 13-02-2008 19:43:
> I was about to configure kerberos connections to my test OpenLDAP system
> (2.4.7, debian sid packages) when I discovered an oddity....
>
> # ldapsearch -x -b "" -s base -LLL supportedSASLMechanisms
> dn:
> supportedSASLMechanisms: CRAM-MD5
> supportedSASLMechanisms: DIGEST-MD5
> supportedSASLMechanisms: LOGIN
> supportedSASLMechanisms: PLAIN
> supportedSASLMechanisms: NTLM
>
> I don't see GSSAPI in the list.  My searching of the doc and google has
> met with no real results.  What must I do to get GSSAPI added as a
> supported mechanism?

1: See that you have libgssapiv2 dynamic libraries in /usr/lib/sasl2 or 
wherever Debian puts them;
2: reflect this in /the/same/path/slapd.conf. I have only digest- and 
cram-md5 and mine looks like:

auxprop_plugin: slapd
pwcheck_method: auxprop
mech_list: digest-md5 cram-md5

Not quite sure what this would be for gssapi, though ...

Best,

--Tonni

--
Tony Earnshaw
Email: tonni at hetnet dot nl