Re: slapd (OpenLDAP v2.0.7) won't bind to ldap:/// AND ldaps:///

[Turbo Fredriksson <turbo@bayour.com>]

Quoting Stig Venas <venaas@alfa.itea.ntnu.no>:

> So it could be SASL related. Nice if someone that experiences this could
> try to track it down. For me ldapsearch works just fine with SSL and I've
> not included the SASL library.

I offer to help as much as I can, I'm not deploying quite yet :)

Using gdb:
----- s n i p -----
Program received signal SIGSEGV, Segmentation fault.
0x40027f58 in ldap_int_sasl_external () from /usr/lib/libldap.so.2
(gdb) bt
#0  0x40027f58 in ldap_int_sasl_external () from /usr/lib/libldap.so.2
#1  0x4003c3f5 in ldap_pvt_tls_start () from /usr/lib/libldap.so.2
#2  0x40022da3 in ldap_int_open_connection () from /usr/lib/libldap.so.2
#3  0x40032207 in ldap_new_connection () from /usr/lib/libldap.so.2
#4  0x40022899 in ldap_open_defconn () from /usr/lib/libldap.so.2
#5  0x40031eb9 in ldap_send_initial_request () from /usr/lib/libldap.so.2
#6  0x4002bbda in ldap_sasl_bind () from /usr/lib/libldap.so.2
#7  0x4002bc78 in ldap_sasl_bind_s () from /usr/lib/libldap.so.2
#8  0x4002c30f in ldap_simple_bind_s () from /usr/lib/libldap.so.2
#9  0x40022867 in ldap_bind_s () from /usr/lib/libldap.so.2
#10 0x804afe4 in main (argc=9, argv=0xbffff9f4) at ldapsearch.c:781
----- s n i p -----

It seems like you're right, it have something to do with SASL...

The changes to the Debian GNU/Linux package of cyrus-sasl is the
--enable-gssapi and --with-des (the original Debian package had
those disabled, but I need them).

Using '-Z' on the baseDN works however, so I'm using this currently:

        ldapsearch -x -b "dc=com" -ZZ -p 3389 -h localhost

-- 
 Turbo     __ _     Debian GNU     Unix _IS_ user friendly - it's just 
 ^^^^^    / /(_)_ __  _   ___  __  selective about who its friends are 
         / / | | '_ \| | | \ \/ /   Debian Certified Linux Developer  
  _ /// / /__| | | | | |_| |>  <  Turbo Fredriksson   turbo@tripnet.se
  \\\/  \____/_|_| |_|\__,_/_/\_\ Stockholm/Sweden

attack Soviet nitrate NSA Albanian bomb Qaddafi Waco, Texas spy KGB
ammonium Serbian SEAL Team 6 Iran smuggle
[See http://www.aclu.org/echelonwatch/index.html for more about this]