Re: errant SASL/GSSAPI setup?

["Allan E. Johannesen" <aej@WPI.EDU>]

First, as the subject has always said, I figure I've done something odd.
However, I don't know what that is.

>>>>> "quanah" == Quanah Gibson-Mount <quanah@stanford.edu> writes:

quanah> Do you have some type of limits set on the master for connections?  If
quanah> you do, you need to bypass those for your replicas repliation DN with
quanah> the "limits" command in the master's slapd.conf.

No, I didn't have an explicit limit for it.  In my ignorance didn't think the
root DN was limited.

I've installed a limit and I'll run another test.

However, why does it time out when the ticket expires, whether that's 4 minutes
or 10 hours?

Also, is this the error I'd see if a limit ran out?

SASL [conn=0] Failure: GSSAPI Error: The context has expired (No error)
sb_sasl_write: failed to encode packet: generic failure
ldap_write: want=11172 error=Input/output error
ber_flush failed errno=5 reason="Input/output error"