Re: Error when using ldapsearch with GSSAPI mechanism

[Amila Jayasekara]

Hi Stefan,
   I am afraid, -O "maxssf=0" option didnt help. I am still getting 
same error.
i.e.
   a...@aj-laptop:~/development/Tools/LDAP/apacheds-1.5.5$ ldapsearch -H 
ldap://localhost:10389 -b "dc=example,dc=com"       "(uid=hnelson)" -Y 
GSSAPI -O maxssf=0
   SASL/GSSAPI authentication started
   ldap_sasl_interactive_bind_s: Local error (-2)
Thanks
AmilaJ

Stefan Seelmann wrote:
Hi Amila,

  
a...@aj-laptop:~/development/Tools/LDAP$ saslpluginviewer | grep -i gssapi
ANONYMOUS LOGIN CRAM-MD5 DIGEST-MD5 GSSAPI PLAIN NTLM EXTERNAL
Plugin "gssapiv2" [loaded],     API version: 4
 SASL mechanism: GSSAPI, best SSF: 56, supports setpass: no
ANONYMOUS LOGIN CRAM-MD5 DIGEST-MD5 GSSAPI PLAIN NTLM EXTERNAL
Plugin "gssapiv2" [loaded],     API version: 4
 SASL mechanism: GSSAPI, best SSF: 56
    

Please try to set SSF to 0 when using ldapsearch:
  ldapsearch ... -Y GSSAPI -O "maxssf=0"

Kind Regards,
Stefan