Why do you want to use SSL if you can use SASL GSSAPI with sasl secprops maxssf = 56 ? I don't remember the default for the Mozilla SDK, if it sets maxssf > 0 as default you need ot set it to 0 whenm using SSL otherwise you have a conflict of requesting two encryption methods GSSAPI and SSL.

Regards
Markus


"Xu, Qiang (FXSGSC)" <[email protected]> wrote in message news:[email protected]...
Hi, all:

Sorry to bother you guys again. Yes, I have new troubles.

Now ldap works well with sasl binding in non-SSL mode. Yet, it does not look good in SSL connection:
=========================================
<apManager> (Thu Apr 09 2009 16:45:55.215) <p8395,t3079326624,aba_ldap_interface.c,1451>
    INFO>> serverHost is [13.198.98.35]
<apManager> (Thu Apr 09 2009 16:45:55.215) <p8395,t3079326624,aba_ldap_interface.c,1452>
    INFO>> serverPort is [636]
......
<apManager> (Thu Apr 09 2009 16:45:55.215) <p8395,t3079326624,aba_ldap_interface.c,1533>
    INFO>> LDAP SSL CONNECTION SUCCESSFUL to 13.198.98.35:636
......
<apManager> (Thu Apr 09 2009 16:45:55.215) <p8395,t3079326624,aba_ldap_interface.c,1641>
    INFO>> SASL Login
<apManager> (Thu Apr 09 2009 16:45:55.686) <p8395,t3079326624,aba_ldap_interface.c,1655>
    INFO>> SASL LDAP BIND with GSSAPI: Value of ldapStatus 48
<apManager> (Thu Apr 09 2009 16:45:55.686) <p8395,t3079326624,aba_ldap_interface.c,1662> ERROR>> LDAP BIND: Value of ldap failure status and text 48 Inappropriate authentication
=========================================
Any possible reason for this kind of error? In contrast, SSL mode works well when simple ldap binding is used.

Looking forward to help,
Xu Qiang=
_______________________________________________
dev-tech-ldap mailing list
[email protected]
https://lists.mozilla.org/listinfo/dev-tech-ldap

Reply via email to