**
Ben Lentz wrote:
Greetings list,
I am using openldap-2.4.12 with cyrus-sasl 2.1.22 with mit krb5-1.6.3
on an AIX 5.3, TL8, SP2 machine.

Whenever I try to use GSSAPI with ldapsearch against a Microsoft
Active Directory server, I get the following error:

SASL/GSSAPI authentication started
ldap_sasl_interactive_bind_s: Local error (-2)

When I run the process through truss -rall -wall -f, I see the
following error near the failure:
GSSAPI Error: An invalid name was supplied (Not enough space)

I am able to acquire a kerberos ticket, I can list the GSSAPI plugin
using pluginviewer, and I can ldapsearch against the MSAD server using
simple authentication.

I am yet to be able to get sasl run with gssapi against AD. If you do make any progress, or if anybody's managed to get it working, please let us know.

I recompiled against OpenLDAP 2.3.27, cyrus-sasl 2.1.22, and mit krb5-1.6.1, and am still getting the GSSAPI Error: An invalid name was supplied (Not enough space) error.

Next, I recompiled the whole shebang against the krb5 from Heimdal and got the same error.

Reply via email to