Hello,
  thank you for the answer.

I suppose the best way on Windows is

1. to make use un the windows native GSSAPI-interface (called 'SSPI'), as
Win32::IntAuth does,

2. and wrap a Authen::SASL adapter around it so Net::LDAP can make use of it.

Sorry I did not do this task in the past.

Does this mean that currently - using a native ActiveState Perl installation and only ActiveState PPMs - there is no way to get this working? Or can I do this "use SSPI and wrap a Authen::SASL adapter around it" within my Perl script?

I guess not ...

The problem is that I have several Perl scripts that have to run on a Windows server regularly via Windows Task Scheduler. The guys in the operating want that the scripts are running under an existing Windows account.
They don't allow me to put a LDAP password in cleartext into a config file.

Regards,  Jochen.

Am 18.02.2015 um 21:55 schrieb Achim Grolms:
On Wednesday 18 February 2015, Jochen Keutel wrote:

The reason is probably that line 10 contains "use GSSAPI;".

According to http://code.activestate.com/ppm/GSSAPI/ : GSSAPI couldn't
be compiled for Windows.
Yes and No.

Yes, it can be compiled on Windows linking against a GSSAPI implementation on
Windows, for example MIT Kerberos. In GSSAPI sourcetree run

perl Makefile.PL --help

to get configuration-help.
In that case you additionally must configure your krb5.conf file with the KDC
you use and run 'ktpass' to get a TGT.

No, because GSSAPI implementation like MIT Kerberos must be installed as a
prerequierement on the Windows machine, Active State has a problem how to
build and ship this module with ppm.

http://www.perlmonks.org/?node_id=851947 describes the same problem but
doesn't offer a solution.

Is there a solution? Is there another way (e.g. another module than
Authen::SASL) to get this working?
I suppose the best way on Windows is

1. to make use un the windows native GSSAPI-interface (called 'SSPI'), as
Win32::IntAuth does,

2. and wrap a Authen::SASL adapter around it so Net::LDAP can make use of it.

Sorry I did not do this task in the past.

Best Regards,
Achim

Reply via email to