Re: Perl Sasl GSSAPI and

2009-04-24 Thread Graham Barr
On Apr 23, 2009, at 8:27 PM, Graham Barr wrote: I have made a change to this effect and pushed to the repository. The perl-ldap repository is not available on github at http://github.com/gbarr/perl-ldap/tree/master This change is on the next branch, I would appreciate anyone testing it. Fo

Re: Perl Sasl GSSAPI and

2009-04-23 Thread Graham Barr
On Apr 14, 2009, at 7:53 AM, Graham Barr wrote: On Apr 13, 2009, at 12:25 PM, Simon Wilkinson wrote: On 13 Apr 2009, at 17:23, Dale Moore wrote: I recommend that if we are going to use Net::LDAP get the peerhost, and use it as part of the service name, that we modify Net::LDAP to do the re

Re: Perl Sasl GSSAPI and

2009-04-14 Thread Clif Harden
Graham Barr wrote: On Apr 13, 2009, at 12:25 PM, Simon Wilkinson wrote: On 13 Apr 2009, at 17:23, Dale Moore wrote: I recommend that if we are going to use Net::LDAP get the peerhost, and use it as part of the service name, that we modify Net::LDAP to do the reverse DNS and not expect GSSAPI

Re: Perl Sasl GSSAPI and

2009-04-14 Thread Graham Barr
On Apr 13, 2009, at 12:25 PM, Simon Wilkinson wrote: On 13 Apr 2009, at 17:23, Dale Moore wrote: I recommend that if we are going to use Net::LDAP get the peerhost, and use it as part of the service name, that we modify Net::LDAP to do the reverse DNS and not expect GSSAPI to do it. Or we ch

Re: Perl Sasl GSSAPI and

2009-04-13 Thread Simon Wilkinson
On 13 Apr 2009, at 17:23, Dale Moore wrote: I recommend that if we are going to use Net::LDAP get the peerhost, and use it as part of the service name, that we modify Net::LDAP to do the reverse DNS and not expect GSSAPI to do it. Or we change our approach in dealing with hosts with round-robin

RE: Perl Sasl GSSAPI and

2009-04-13 Thread Dale Moore
Ok. The patch at http://git.goingon.net/?p=perl-ldap.git;a=commitdiff;h=af630673855d88c9a88e1f86ee0d068337562e91 takes advantage of Reverse DNS lookups in krb5_sname_to_prinicipal(); In MIT Kerberos, the ability to do a reverse DNS lookup in krb5_sname_to_principal() appears to be a compile ti