Re: Kerberized LDAP not accessible

To: Thomas Schweikle <tps@vr-web.de>
Subject: Re: Kerberized LDAP not accessible
From: zoolook <nbensa@gmail.com>
Date: Fri, 21 Jan 2011 08:17:11 -0300
Cc: openldap-technical@openldap.org
Dkim-signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:mime-version:in-reply-to:references:date :message-id:subject:from:to:cc:content-type; bh=wfPwplpiJYlCtThD1aQ+ai+dZf+JwTlOObejrzz4d64=; b=kgJpOMWCIOInfwtGlGmIsqoT2YzNyVI9vhbxnvSBh6mG6qqIQJC8K68z7eciCvTV5s m9HY+7piAEjOfXALAhinFU4j2DrrBe6PZ7kBt6NresuOyaxzbwaEpgVl9yvZ+9sP9dFY iiSdcYXyRvgsGs+X4C5HBpIC1+nFO5KMOm5E8=
Domainkey-signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc:content-type; b=m9BCDYHsPJy5FJCOk6OKVtAubr2mgnami2KHJa/U9FR5dCyooH8BfNauAcg1wNyDYn mw02nDsY0KHmoyxGErQgGB8aWMLMjZjdY41AE7dZeGm2Zj36CPw2E00Lji7m5WlWJkt+ 3xThabKLeVpc42ZFLCl95x3kKO3PzgNRpU8gA=
In-reply-to: <4D3963E1.8050008@vr-web.de>
References: <4D3963E1.8050008@vr-web.de>

Hello Thomas,

2011/1/21 Thomas Schweikle <tps@vr-web.de>

Hi!

I kerberized ldap:

Maybe you missed "olcAuthzPolicy"

client:~$ ldapsearch -H ldap://srv.example.com
SASL/DIGEST-MD5 authentication started

Is not using GSSAPI.

Does your slapd have a kerberos principal (ldap/srv.example.com@EXAMPLE.COM) ?

Did you tell slapd where its kerberos keytab file is (export KRB5_KTNAME=/path/to/keytab)?

Regards,

Norberto

References:
- Kerberized LDAP not accessible
  - From: Thomas Schweikle <tps@vr-web.de>