Re: GSSAPI (SASL) + LDAP

[Dan White <dwhite@olp.net>]

On 02/09/12 17:15 -0500, Daniel Savard wrote:
> Hi everyone,
>
> I am trying to implement Kerberos authentication and I believe I am
> almost there, however when I run the ldapwhoami command I am getting a
> segmentation fault rather than a success message. Here is the output of
> the ldapwhoami (yes, I have a Kerberos ticket):
>
> SASL/GSSAPI authentication started
> SASL username: dsavard@CIDS.CA
> SASL SSF: 56
> SASL data security layer installed.
> dn:cn=daniel savard,dc=cids,dc=ca
> Segmentation fault

This could be a libsasl2 problem. What version of cyrus sasl do you have
installed, and what kerberos library/version is it compiled against?

If you're running libsasl2 > 2.1.23, see if either of these apply to you:

https://bugzilla.cyrusimap.org/show_bug.cgi?id=3480
https://bugzilla.cyrusimap.org/show_bug.cgi?id=3445

> The cn is properly mapped. When switching debug on I am getting the
> following messages and the only thing I find as a potential indication
> of my problem is this message (res_errno: 14, res_error: <SASL(0):
> successful result: security flags do not match required>, res_matched:
> <>) however I am not able to decipher what it means exactly:

--
Dan White