On Tue, Dec 21, 2010 at 08:36:17PM -0500, Simo Sorce wrote:
>
> Attached find a patch in the proper git format.
>
> Adam can you push it if you think it is ok ?
I added "#include " into the ldap_helper.c to fix
following warning:
ldap_helper.c: In function 'new_ldap_instance':
ldap_helper.c:394
Attached find a patch in the proper git format.
Adam can you push it if you think it is ok ?
Thanks,
Simo.
On Fri, 17 Dec 2010 18:15:22 +0100
Zoran Pericic wrote:
> On 12/16/2010 08:25 PM, Simo Sorce wrote:
>
> >> +(str_casecmp_char(ldap_inst->sasl_mech, "GSSAPI") == 0)) {
> >> +
On 12/16/2010 08:25 PM, Simo Sorce wrote:
+(str_casecmp_char(ldap_inst->sasl_mech, "GSSAPI") == 0)) {
+if((ldap_inst->krb5_principal == NULL)&&
+(str_len(ldap_inst->krb5_principal) == 0)) {
+if((ldap_inst->sasl_user == NULL)&&
+(str_len(lda
On Thu, 16 Dec 2010 19:47:41 +0100
Zoran Pericic wrote:
> This patch separate sasl_user from keytab.
>
> For some reason OpenLDAP refuse login if I use sasl_user. OpenLDAP
> try to do proxy login which always fail. openldap clients
> (ldapsearch) sends empty sasl_user for GSSAPI login. To send e
On Thu, 16 Dec 2010 19:47:41 +0100
Zoran Pericic wrote:
> This patch separate sasl_user from keytab.
Any chance you can send the patch in git format using the following
flags: -M -C --patience --full-index
Will comment on the patches themselves separately.
Simo.
--
Simo Sorce * Red Hat, Inc
This patch separate sasl_user from keytab.
For some reason OpenLDAP refuse login if I use sasl_user. OpenLDAP try
to do proxy login which always fail. openldap clients (ldapsearch) sends
empty sasl_user for GSSAPI login. To send empty sasl_user we need
separate option for krb5 principal so we