--On Monday, October 19, 2009 3:46 PM -0700 Quanah Gibson-Mount 
<[email protected]> wrote:

> This problem is also seen with Net::LDAPapi perl module, so it is library
> rather than tool specific.

It seems to be SASL specific as well (Stanford uses GSSAPI binds).  I 
modified one of the problematic servers to have access to * by * read as 
its only ACL, and then did two searches.  One using SASL/GSSAPI and one 
using anonymous query.  The anonymous query succeeded across multiple runs. 
The SASL/GSSAPI query failed to complete.

This was with a 2.4.19 ldapsearch binary against a remote 2.4.19 slapd.

--Quanah

--

Quanah Gibson-Mount
Principal Software Engineer
Zimbra, Inc
--------------------
Zimbra ::  the leader in open source messaging and collaboration


Reply via email to