Pat Riehecky skrev, on 13-02-2008 19:43:
I was about to configure kerberos connections to my test OpenLDAP system
(2.4.7, debian sid packages) when I discovered an oddity....
# ldapsearch -x -b "" -s base -LLL supportedSASLMechanisms
dn:
supportedSASLMechanisms: CRAM-MD5
supportedSASLMechanisms: DIGEST-MD5
supportedSASLMechanisms: LOGIN
supportedSASLMechanisms: PLAIN
supportedSASLMechanisms: NTLM
I don't see GSSAPI in the list. My searching of the doc and google has
met with no real results. What must I do to get GSSAPI added as a
supported mechanism?
1: See that you have libgssapiv2 dynamic libraries in /usr/lib/sasl2 or
wherever Debian puts them;
2: reflect this in /the/same/path/slapd.conf. I have only digest- and
cram-md5 and mine looks like:
auxprop_plugin: slapd
pwcheck_method: auxprop
mech_list: digest-md5 cram-md5
Not quite sure what this would be for gssapi, though ...
Best,
--Tonni
--
Tony Earnshaw
Email: tonni at hetnet dot nl
