[Date Prev][Date Next] [Chronological] [Thread] [Top]

Re: OpenLDAP + Kerberos on FreeBSD 7.2, close to working but not quite



OpenLDAP is compiled with SASL support. I remember checking the box for SASL and if I cd /usr/ports/net/openldap24-server && make config I see that SASL is indeed marked. As far as checking for libgssapi, I ran the following to verify:

frisbee# locate libgssapi
/usr/lib/libgssapi.a
/usr/lib/libgssapi.so
/usr/lib/libgssapi.so.9
/usr/lib/libgssapi_krb5.a
/usr/lib/libgssapi_krb5.so
/usr/lib/libgssapi_krb5.so.9
/usr/local/lib/sasl2/libgssapiv2.a
/usr/local/lib/sasl2/libgssapiv2.la
/usr/local/lib/sasl2/libgssapiv2.so
/usr/local/lib/sasl2/libgssapiv2.so.2



On Mon, Aug 10, 2009 at 5:28 PM, Dieter Kluenter <dieter@dkluenter.de> wrote:
Allan <cr4z3d@gmail.com> writes:

> Thank you for the response. I ran the command and it looks like there's none supported.. This is strange.
> How can I allow GSSAPI?
>
> frisbee# /usr/local/bin/ldapsearch -x -H ldap://localhost -b "" -s base supportedSaslMechanisms
> # extended LDIF
> #
> # LDAPv3
> # base <> with scope baseObject
> # filter: (objectclass=*)
> # requesting: supportedSaslMechanisms
> #
>
> #
> dn:
>
> # search result
> search: 2
> result: 0 Success
>
> # numResponses: 2
> # numEntries: 1

Is openldap compiled with sasl support?
is lib/sasl2/libgssapi or any other sasl mechanism available?

-Dieter

--
Dieter Klünter | Systemberatung
http://dkluenter.de
GPG Key ID:8EF7B6C6
53°08'09,95"N
10°08'02,42"E