[Date Prev][Date Next]
[Chronological]
[Thread]
[Top]
Re: authentication problem
Dan White wrote:
> On 15/05/11 17:59 +0430, Mohammad D wrote:
>> I have installed openldap 2.4.23 on windows server 2003. when I run this
>> query on ldapsearch:
>> ldapsearch -h directory.verisign.com -b "cn=<*>" "(o=*)"
>> "certificaterevocationlist"
>> I get the following error:
>> SASL/EXTERNAL authentication started
>> ldap_sasl_interactive_bind_s: Unknown authentication method (-6)
>> additional info: SASL(-4): no mechanism available:
>>
>> I installed MIT kerberos but it did not solve the problem.
>> any one know whats the issue and how can it be solved?
>
> Did you build cyrus sasl with GSSAPI support?
Dan, why do you ask for GSSAPI?
I guess the original poster just wants to use command-line option -x for
simple anonymous bind. Also the search base (-b) seems to be wrong. It should
be -b "" for an empty search base.
I doubt that this will work anyway. Playing around with
ldap://directory.verisign.com it returns
Server is unwilling to perform:
Presence filter is unsupported
when searching with filter (o=*). Frankly I don't know whether this server is
usable anymore for anything one would consider useful. That's the reason I
removed it from the default select list in web2ldap's demo server.
Side note:
Verisign publishes its CRLs via HTTP: http://crl.verisign.com/
Ciao, Michael.