On Tue, 9 Aug 2005, SteveC wrote:
> Quanah Gibson-Mount wrote:
> >
> >
> > --On Tuesday, August 09, 2005 4:54 PM +0100 Simon Wilkinson
> > <[EMAIL PROTECTED]> wrote:
> >
> >> Graham Barr wrote:
> >>
> >>> IIRC there are two Authen::SASL::Cyrus implmentations. Someone did thier
> >>> own becuase they had little luck with the one on CPAN.
> >>>
> >>> Does anyone on the list remember this?
> >>
> >>
> >> There are three different implementations.
> >>
> >> I produced one in the dim and distant past, which was never upgraded to
> >> the new Authen::SASL API.
> >>
> >> Mark Adamson from CMU produced one, which is the 'official'
> >> Authen::SASL:Cyrus on CPAN. I don't know of anyone who's had much luck
> >> using this in production without significant patches.
> >>
> >> Patrick Boettcher produced a fork of Mark Adamson's module which is
> >> available from
> >> http://www.wi-bw.tfh-wildau.de/~pboettch/home/index.php?site=asc
> >> which we're using locally.
> >
> >
> >
> > Patrick's release (the only one I've ever had any luck with) is now part
> > of CPAN, as authen-cyrus-sasl-server.
> >
> >
> > <http://search.cpan.org/~pboettch/Authen-SASL-Cyrus-0.13-server/>
> >
> > will get you Patrick's.
> >
> > --Quanah
> >
> > --
> > Quanah Gibson-Mount
> > Principal Software Developer
> > ITSS/Shared Services
> > Stanford University
> > GnuPG Public Key: http://www.stanford.edu/~quanah/pgp.html
> >
> > "These censorship operations against schools and libraries are stronger
> > than ever in the present religio-political climate. They often focus on
> > fantasy and sf books, which foster that deadly enemy to bigotry and blind
> > faith, the imagination." -- Ursula K. Le Guin
> >
> That is the one that I have downloaded and installed and get the 'Local
> error' with.
I'm still unable to get Net::LDAP and Authen::SASL::Cyrus to play
nice. I'm using perl-ldap 0.33 and Authen-SASL-Cyrus-0.12-server
with perl-5.8.6.
I get a slightly different result "Use of uninitialized value" but
I have elicited the "Local error" message before.
Using the test script:
#!/opt/perl-5.8.6/bin/perl -w
use Net::LDAP;
use Authen::SASL;
my $slavesasl = Authen::SASL->new(mechanism=>'GSSAPI',
'user' => " ", # empty callback, so Net::LDAP don't overrides it
);
my $ldap = Net::LDAP->new('ldap1', version=>3, async=>1, debug =>3) || die
"$@";
my $mesg = $ldap->bind("", sasl=>$slavesasl, async=>1);
$mesg->code && die $mesg->error;
$mesg =
$ldap->search(async=>1,filter=>"(uid=lile)",base=>"dc=anim,dc=dreamworks,dc=com");
@entries = $mesg->entries;
foreach $entry (@entries) {
$entry->dump;
}
[EMAIL PROTECTED] led]$ klist
Ticket cache: FILE:/tmp/krb5cc_1625_JxCOkw
Default principal: [EMAIL PROTECTED]
Valid starting Expires Service principal
08/09/05 11:39:31 08/10/05 12:39:31
krbtgt/[EMAIL PROTECTED]
[EMAIL PROTECTED] led]$ ./test-cyrus
Net::LDAP=HASH(0x940e974) sending:
30 82 02 26 02 01 01 60 82 02 1F 02 01 03 04 00 0..&...`........
A3 82 02 16 04 06 47 53 53 41 50 49 04 82 02 0A ......GSSAPI....
60 82 02 06 06 09 2A 86 48 86 F7 12 01 02 02 01 `.....*.H.......
00 6E 82 01 F5 30 82 01 F1 A0 03 02 01 05 A1 03 .n...0..........
02 01 0E A2 07 03 05 00 20 00 00 00 A3 82 01 31 ........ ......1
61 82 01 2D 30 82 01 29 A0 03 02 01 05 A1 15 1B a..-0..)........
13 41 4E 49 4D 2E 44 52 45 41 4D 57 4F 52 4B 53 .ANIM.DREAMWORKS
2E 43 4F 4D A2 2D 30 2B A0 03 02 01 03 A1 24 30 .COM.-0+......$0
22 1B 04 6C 64 61 70 1B 1A 6D 6F 6F 6E 65 79 2E "..ldap..mooney.
61 6E 69 6D 2E 64 72 65 61 6D 77 6F 72 6B 73 2E anim.dreamworks.
63 6F 6D A3 81 DB 30 81 D8 A0 03 02 01 01 A1 03 com...0.........
02 01 05 A2 81 CB 04 81 C8 9B 61 EF 10 C6 31 3D ..........a...1=
BB 1C 71 B1 3F DF FB 04 A2 A9 5D 3A 5F BC 62 13 ..q.?.....]:_.b.
39 E1 41 60 00 B0 C8 0C DE 47 17 9F 56 E3 F0 69 9.A`.....G..V..i
92 F3 18 59 E0 B8 1A 1A 02 61 1D 1F A4 7B 36 E5 ...Y.....a...{6.
7A 4A CB 51 4E 22 37 D2 C4 51 34 DF 2E BF EC 8D zJ.QN"7..Q4.....
9B 0A 6D 3F 2A E2 33 73 9A 73 48 77 BD 6F 11 03 ..m?*.3s.sHw.o..
EB E1 5C 83 BA 83 80 90 3C 6C C4 1B 6C 60 F9 1C ..\.....<l..l`..
53 4B 96 C6 36 0A F4 F5 AE 46 11 E1 74 71 0A 61 SK..6....F..tq.a
C6 46 7D FB 38 87 A5 0C BB FC CF 8E C4 7F 13 1B .F}.8...........
3E 97 0E 94 0B 5F 65 98 8C 2D 8B 4C 00 68 F5 D6 >...._e..-.L.h..
EF 4A A0 66 A9 DC E0 A1 C6 91 5D 3C 88 04 2E 5C .J.f......]<...\
9B 88 FC EB 12 1A F0 33 E4 1D 0A 9A DB F7 63 D3 .......3......c.
4C A5 FE B1 3C 1F AF E7 E0 C7 95 2D AE E1 FA 62 L...<......-...b
7C A4 81 A6 30 81 A3 A0 03 02 01 01 A2 81 9B 04 |...0...........
81 98 D0 AE A7 E2 BA 9F 51 E7 3A 3D FA F9 7B 39 ........Q.:=..{9
CC 3E 2F 8C 17 AF C4 E1 26 4F 9A 7C 4E 4A B5 A1 .>/.....&O.|NJ..
F6 C8 C2 69 3C A1 CF 2F 1A 5A F2 FC 86 DF 3B B0 ...i<../.Z....;.
8C 88 F5 6B 83 59 0D A4 7B 99 DB 2C C2 6F D0 0F ...k.Y..{..,.o..
05 82 C2 6C 5E 73 E6 2D 98 EF 06 AB 62 A5 4F 88 ...l^s.-....b.O.
04 66 E2 FB 8E 60 42 26 BD 6F F8 D5 DF 23 9F 0E .f...`B&.o...#..
10 87 59 F3 D6 F8 56 50 E8 CC AD 11 03 33 62 AE ..Y...VP.....3b.
05 22 E7 DE 40 55 D8 BD 4B 3E 5D FA F2 47 16 3A ."[EMAIL PROTECTED]>]..G.:
21 0F DF E1 56 D3 68 98 FD E3 F7 E4 0A 7A 43 00 !...V.h......zC.
31 E3 F7 A6 04 E2 55 1F 34 6A __ __ __ __ __ __ 1.....U.4j
Net::LDAP=HASH(0x93fd864) received:
30 78 02 01 01 61 73 0A 01 0E 04 00 04 00 87 6A 0x...as........j
60 68 06 09 2A 86 48 86 F7 12 01 02 02 02 00 6F `h..*.H........o
59 30 57 A0 03 02 01 05 A1 03 02 01 0F A2 4B 30 Y0W...........K0
49 A0 03 02 01 01 A2 42 04 40 6C C3 B4 0A 17 96 [EMAIL PROTECTED]
0B 6A CD 1F 99 45 0F 99 26 0B 6E 5B 7F 4C B4 FF .j...E..&.n[.L..
76 4E 57 2E FF 49 B7 F8 DB 2E CE C5 6E 27 CE 49 vNW..I......n'.I
DF 29 43 22 39 3E B1 E2 75 5E 4D 3A FE 50 A7 D3 .)C"9>..u^M:.P..
DE A2 2B 71 2C 67 3A F7 78 A3 __ __ __ __ __ __ ..+q,g:.x.
Net::LDAP=HASH(0x93fdae0) sending:
30 14 02 01 02 60 0F 02 01 03 04 00 A3 08 04 06 0....`..........
47 53 53 41 50 49 __ __ __ __ __ __ __ __ __ __ GSSAPI
Net::LDAP=HASH(0x93fd864) received:
30 43 02 01 02 61 3E 0A 01 0E 04 00 04 00 87 35 0C...a>........5
60 33 06 09 2A 86 48 86 F7 12 01 02 02 02 01 00 `3..*.H.........
00 FF FF FF FF 41 C2 BD 59 E5 D2 C9 BA 22 E9 61 .....A..Y....".a
68 F4 36 B9 47 36 9D 05 F3 74 E4 FA 9C 01 00 00 h.6.G6...t......
04 04 04 04 04 __ __ __ __ __ __ __ __ __ __ __ .....
Net::LDAP=HASH(0x9454684) sending:
30 4B 02 01 03 60 46 02 01 03 04 00 A3 3F 04 06 0K...`F......?..
47 53 53 41 50 49 04 35 60 33 06 09 2A 86 48 86 GSSAPI.5`3..*.H.
F7 12 01 02 02 02 01 00 00 FF FF FF FF 57 9D A9 .............W..
89 42 C0 CE A3 72 1C FB FB CD 0D 99 35 BB 30 C6 .B...r......5.0.
25 77 AD 2E B2 01 00 FF FF 04 04 04 04 __ __ __ %w...........
Net::LDAP=HASH(0x93fd864) received:
30 0C 02 01 03 61 07 0A 01 00 04 00 04 00 __ __ 0....a........
Net::LDAP=HASH(0x940e974) sending:
30 41 02 01 04 63 3C 04 1C 64 63 3D 61 6E 69 6D 0A...c<..dc=anim
2C 64 63 3D 64 72 65 61 6D 77 6F 72 6B 73 2C 64 ,dc=dreamworks,d
63 3D 63 6F 6D 0A 01 02 0A 01 02 02 01 00 02 01 c=com...........
00 01 01 00 A3 0B 04 03 75 69 64 04 04 6C 69 6C ........uid..lil
65 30 00 __ __ __ __ __ __ __ __ __ __ __ __ __ e0.
Use of uninitialized value in print at
/opt/perl-5.8.6/lib/site_perl/5.8.6/i686-linux/Authen/SASL/Cyrus/Security.pm
line 81, <DATA> line 225.
Which sometimes exits, sometimes hangs and sometimes it manages to
get a ticket.
[EMAIL PROTECTED] led]$ klist
Ticket cache: FILE:/tmp/krb5cc_1625_JxCOkw
Default principal: [EMAIL PROTECTED]
Valid starting Expires Service principal
08/09/05 11:39:31 08/10/05 12:39:31
krbtgt/[EMAIL PROTECTED]
08/09/05 11:40:43 08/10/05 12:39:31
ldap/[EMAIL PROTECTED]
Any wisdom on whats wrong?
--
Larry
