Re: Netscape C SDK LDAP API ldap_sasl_bind_s, compatibility of SASL authentication with Windows 2003

["Kurt D. Zeilenga" <Kurt@OpenLDAP.org>]

Your post is off-topic.  Questions about products produced by
others, such as Netscape and Microsoft, should be directed
to forums specifically intended to support such products.
I believe both Netscape and Microsoft operate such forums
for their products.

Kurt

At 04:05 AM 8/17/2004, peter_yen@trendmicro.com wrote:


>> Hi All,
>>
>
>> Sorry to take the liberty to bombarding you all with this email. I am currently using the directory C SDK module to implement a
>
>> ldap client with Kerberos authentication support. I am adopting the Samba ads_sasl_gssapi_bind() implementation for my ldap client to do GSS-API/SASL authentication to a windows 2003 Active Directory. (http://samba.org/doxygen/appliance-head/sasl_8c.html#a6). The same program works fine on Windows 2000 but failed with a error (Error Message : 8009030B: LdapErr: DSID-0C090419, comment: AcceptSecurityContext error, data 0, vece.0...) on Windows 2003. My packet trace gives me the verbose version of error message: Invalid credentail(result  code = 0x31). I was wondering if there is a known issue with ldap_sasl_bind_s() or I missed out something here? Your kind feedbacks and insights are highly appreciated. Many thanks in advance. I've also attached the packet trace for your review.
>
>>
>
>> packet filter = "ip.dst == 10.2.202.250 || ip.dst == 10.2.203.107"
>
>>
>
>> Sincerely,
>>
>
>> Peter Yen> >  <<win2003_trace>>
>
>>
>
>
>
>TREND MICRO EMAIL NOTICE
>The information contained in this email and any attachments is confidential and may be subject to copyright or other intellectual property protection. If you are not the intended recipient, you are not authorized to use or disclose this information, and we request that you notify us by reply mail or telephone and delete the original message from your mail system.