RE: GSSAPI, OpenLDAP 2.0.21 and core dump

[Anthony Brock <abrock@georgefox.edu>]

I am still having the core dump with OpenLDAP 2.0.21.

I have fixed the "PRNG not seeded error" with SSL, and I am still 
experiencing the same repeatable core dumps when using OpenLDAP 2.0.21 on 
Solaris 8 10/01 (64-bit Sparc E250 architecture). The software was compiled 
with Sun WorkShop 5.0 (with patch 107357-11).

I start the server with:

/usr/local/libexec/slapd -f /usr/local/etc/openldap/slapd.conf -d $2 -h 
"ldap://scripts.georgefox.edu/ ldaps://scripts.georgefox.edu/"

and then query the server. The client first queries me for my authorization 
name, and then says:

ldap_sasl_interactive_bind_s: Can't contact LDAP server

At this point, the server dumps a core file and exits. The debug file ends 
with:

********************
... <SNIP> ...
ber_get_next
do_bind
ber_get_next on fd 9 failed errno=11 (Resource temporarily unavailable)
ber_scanf fmt ({iat) ber:
ber_scanf fmt ({a) ber:
ber_scanf fmt (o) ber:
ber_scanf fmt (}}) ber:
do_sasl_bind: dn () mech GSSAPI
********************

Does anyone have any idea what would cause this? How do I proceed in 
troubleshooting the problem? ANY help is greatly appreciated!

Tony

P.S. I am attaching the transcript from the client side:

********************
$ kinit -p abrock
Password for abrock@TESTDOM.EDU:
$ klist -e
Ticket cache: /tmp/krb5cc_100
Default principal: abrock@TESTDOM.EDU

Valid starting                       Expires                       Service 
principal
Tue Feb 05 10:21:20 2002  Tue Feb 05 20:21:20 
2002  krbtgt/TESTDOM.EDU@TESTDOM.EDU
        renew until Tue Feb 12 10:21:20 2002, Etype (skey, tkt): 
DES-CBC-CRC, etype 16
$ ldapsearch -L -H ldaps://scripts.georgefox.edu/ -x -b "" -s base -LLL 
supportedSASLMechanisms
dn:
supportedSASLMechanisms: LOGIN
supportedSASLMechanisms: PLAIN
supportedSASLMechanisms: GSSAPI

$ ldapsearch -L -H ldaps://scripts.georgefox.edu/ -I -b "" -s base -LLL 
supportedSASLMechanisms
SASL/GSSAPI authentication started
SASL Interaction
Please enter your authorization name: abrock
ldap_sasl_interactive_bind_s: Can't contact LDAP server
$
**********


******************************************************************************
* Anthony Brock                                         abrock@georgefox.edu *
* Director of Network Services                         George Fox University *
******************************************************************************