Re: change related to its 4046 seems to break sasl/gssapi working with AD

[Quanah Gibson-Mount <quanah@stanford.edu>]

--On Wednesday, October 19, 2005 3:13 PM -0400 "Chapman, Kyle" 
<Kyle_Chapman@G1.com> wrote:

> im not sure this is a legit problem or an issue with how MS deals with
> sasl/gssapi...
>
> changes for cyrus.c 1.112.2.6 to 1.112.2.7 break sasl/gssapi binds to AD
> (vers 2.3.8 and up, at least for me).  if i roll back to 1.112.2.6 in
> 2.3.11, everything builds ok and ldapsearch/sasl/gssapi to AD work.
> looking at the diff, there is memory cleanup as well as some changes to
> checking the values provided by scred following a call to
> ldap_sasl_bind_s.  adding back in the mem cleanup and the first reorder
> of the if statements and rebuilding, sasl/gssapi still works.   changing
> the second if statement results in (this change is after seeing if the rc
> and saslrc are OK):

You should follow up to the ITS if you want anyone to look at this.  Posts 
to the openldap-software list are seen as purely informational.

--Quanah

--
Quanah Gibson-Mount
Principal Software Developer
ITSS/Shared Services
Stanford University
GnuPG Public Key: http://www.stanford.edu/~quanah/pgp.html