[
https://issues.apache.org/jira/browse/DIRSERVER-1113?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Enrique Rodriguez resolved DIRSERVER-1113.
------------------------------------------
Resolution: Fixed
Added support to LDAP SASL GSSAPI for different Kerberos encryption types
(DIRSERVER-1113):
o Call to retrieve Subject now iterates over all keys returned for the LDAP
service principal and adds the keys to the private credentials.
Committed to protocol-ldap module in 'bigbang' branch on revision 605767.
http://svn.apache.org/viewcvs.cgi?view=rev&rev=605767
> LDAP SASL GSSAPI lacks support for different Kerberos encryption types
> ----------------------------------------------------------------------
>
> Key: DIRSERVER-1113
> URL: https://issues.apache.org/jira/browse/DIRSERVER-1113
> Project: Directory ApacheDS
> Issue Type: Bug
> Components: ldap
> Affects Versions: 1.5.1
> Reporter: Enrique Rodriguez
> Assignee: Enrique Rodriguez
> Fix For: 1.5.2
>
>
> The SASL GSSAPI support in ApacheDS' LDAP protocol only supports DES-based
> Kerberos encryption types.
> The solution is to simply iterate over the keys for the LDAP service
> principal and add them all to the Subject that is used by jGSS.
--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.
