RE:

["Adams, Gavin" <gadams@promisant.com>]

Does Cyrus SASL 1.5 support the GSSAPI mechanism? 1.5 is the provided
RPM with RedHat 7.3 distro. Would it be recommended to build OpenLDAP
2.1, upgrade SASL to 2.x and then give it a go?

And I though OpenSSL had a complex implementation.... :>

--- Gavin 

> -----Original Message-----
> From: Howard Chu [mailto:hyc@highlandsun.com]
> Sent: Monday, June 17, 2002 11:40 AM
> To: Rodier Bernard; openldap-software@OpenLDAP.org
> Subject: RE:
> 
> OpenLDAP 2.0 only supports Cyrus SASL 1.5.
> 
>   -- Howard Chu
>   Chief Architect, Symas Corp.       Director, Highland Sun
>   http://www.symas.com               http://highlandsun.com/hyc
>   Symas: Premier OpenSource Development and Support
> 
> > -----Original Message-----
> > From: owner-openldap-software@OpenLDAP.org
> > [mailto:owner-openldap-software@OpenLDAP.org]On Behalf Of Rodier
Bernard
> > Sent: Monday, June 17, 2002 5:13 AM
> > To: openldap-software@OpenLDAP.org
> > Subject:
> >
> >
> > Hi all,
> >
> > I had intalled OpenLDAP and Kerberos on a box (Red Hat 7.3 with
> > OpenLDAP-2.0.23 cyrus-sasl-2.1.2)
> >
> > acually users can authenticate themselves on the system using
> > ldap (nss_ldap
> > and pam_ldap). I can recieve tickets from kdc but I can't query ldap
> with
> > SASL GSSAPI mechanism.
> >
> > when I try directly on ldapserver
> >
> > $ldapsearch -X -D "cn=root,dc=highdeal,dc=com"
> >
> > i obtain the following answerd :
> >
> >        SASL/GSSAPI authentication started
> >        ldap_sasl_interactive_bind_s: Local error
> >
> > and on a remote client, answer is:
> >
> >        ldap_sasl_interactive_bind_s: Unknown authentication method
> >
> > but i obtain the following with
> >
> > $ldapsearch -h Maracas -x -b "" -s base -LLL
supportedSASLMechanisms:
> > dn:
> > supportedSASLMechanisms: GSSAPI
> >
> > thanks in advance
> >
> > Bernard