[Date Prev][Date Next] [Chronological] [Thread] [Top]

Re: OpenLDAP with GSSAPI problem

To: Turbo Fredriksson <turbo@bayour.com>
Subject: Re: OpenLDAP with GSSAPI problem
From: "Kurt D. Zeilenga" <Kurt@OpenLDAP.org>
Date: Fri, 08 Aug 2003 04:33:48 -0700
Cc: openldap-software@OpenLDAP.org
In-reply-to: <87oez0d25j.fsf@papadoc.bayour.com>
References: <000a01c35d0d$07a9c370$0e01a8c0@CELLO> <000a01c35d0d$07a9c370$0e01a8c0@CELLO>

At 12:44 AM 8/8/2003, Turbo Fredriksson wrote:
>Quoting "Howard Chu" <hyc@highlandsun.com>:
>
>> As I already stated - saslRegexp mapping is a purely optional step.
>
>I find this a very theoretical statement. True, but not in 'the real' world.

Howard is correct.  I have personally seen many real world
examples of GSSAPI with ACLs acting upon unmapped authzDNs.
This is not to say that mapping isn't useful, it often is
(for "by self").

References:
- RE: OpenLDAP with GSSAPI problem
  - From: "Howard Chu" <hyc@highlandsun.com>
- Re: OpenLDAP with GSSAPI problem
  - From: Turbo Fredriksson <turbo@bayour.com>

Prev by Date: (2.2.0alpha) slapd crashes on strong bind
Next by Date: Re: RedHat 9's ldapsearch segfaults with SubjectAltName certificates
Index(es):
- Chronological
- Thread