[Date Prev][Date Next] [Chronological] [Thread] [Top]

Re: Kerberized LDAP not accessible

On Fri, Jan 21, 2011 at 11:45:53AM +0100, Thomas Schweikle wrote:
> client:~$ ldapsearch -H ldap://srv.example.com
> SASL/DIGEST-MD5 authentication started

Try adding -Y GSSAPI to ldapsearch command line.

I found the same (that DIGEST-MD5 was being preferred over GSSAPI). You can
fix it by disabling DIGEST-MD5.

Under Ubuntu, I did this by

    # vi /etc/ldap/sasl2/slapd.conf
    mech_list: gssapi external

The location of this config file may differ under other distros.