Re: OpenLDAP2 and SASL/Kerberos

[Norbert Klasen <klasen@zdv.uni-tuebingen.de>]

Turbo Fredriksson wrote:
> CHROOT:/tmp/sample# ldapsearch -b "dc=com" -H ldaps:/// -I > ldap_sasl_interactive_bind_s: Unknown authentication method

Seems to be some signend/unsigned arithmetic mismatch. Try this in
cyrus-sasl/plugins:
--- gssapi.c.orig Mon Jan 22 17:52:32 2001
+++ gssapi.c   Tue Mar  6 23:05:48 2001
@@ -1243,7 +1243,7 @@

   /* need bits of layer */
   allowed = secprops.max_ssf - external;
-  need = secprops.min_ssf - external;
+  need = secprops.min_ssf <=  external ? 0 : secprops.min_ssf -
external;
   serverhas = ((char *)output_token->value)[0];

   /* if client didn't set use strongest layer available */


-- 
Norbert Klasen
DFN Directory Services                           tel: +49 7071 29 70335
ZDV, Universität Tübingen                        fax: +49 7071 29 5912
Wächterstr. 76, 72074 Tübingen              http://www.directory.dfn.de
Germany                             norbert.klasen@zdv.uni-tuebingen.de