[Date Prev][Date Next] [Chronological] [Thread] [Top]

Re: Compile openldap library with GSSAPI enabled

Hi
this is my pluginviewer and cyrus rpms installed on my machine.
I think I already get it.

# pluginviewer
Installed SASL (server side) mechanisms are:
LOGIN GSSAPI PLAIN ANONYMOUS EXTERNAL
List of server plugins follows
Plugin "login" [loaded],        API version: 4
        SASL mechanism: LOGIN, best SSF: 0, supports setpass: no
        security flags: NO_ANONYMOUS
        features:
Plugin "gssapiv2" [loaded],     API version: 4
        SASL mechanism: GSSAPI, best SSF: 56, supports setpass: no
        security flags:
NO_ANONYMOUS|NO_PLAINTEXT|NO_ACTIVE|PASS_CREDENTIALS|MUTUAL_AUTH
        features: WANT_CLIENT_FIRST|PROXY_AUTHENTICATION
Plugin "plain" [loaded],        API version: 4
        SASL mechanism: PLAIN, best SSF: 0, supports setpass: no
        security flags: NO_ANONYMOUS
        features: WANT_CLIENT_FIRST|PROXY_AUTHENTICATION
Plugin "anonymous" [loaded],    API version: 4
        SASL mechanism: ANONYMOUS, best SSF: 0, supports setpass: no
        security flags: NO_PLAINTEXT
        features: WANT_CLIENT_FIRST
Installed auxprop mechanisms are:
sasldb
List of auxprop plugins follows
Plugin "sasldb" ,       API version: 4
        supports store: yes

Installed SASL (client side) mechanisms are:
LOGIN GSSAPI PLAIN ANONYMOUS EXTERNAL
List of client plugins follows
Plugin "login" [loaded],        API version: 4
        SASL mechanism: LOGIN, best SSF: 0
        security flags: NO_ANONYMOUS
        features: SERVER_FIRST
Plugin "gssapiv2" [loaded],     API version: 4
        SASL mechanism: GSSAPI, best SSF: 56
        security flags:
NO_ANONYMOUS|NO_PLAINTEXT|NO_ACTIVE|PASS_CREDENTIALS|MUTUAL_AUTH
        features: WANT_CLIENT_FIRST|PROXY_AUTHENTICATION|NEED_SERVER_FQDN
Plugin "plain" [loaded],        API version: 4
        SASL mechanism: PLAIN, best SSF: 0
        security flags: NO_ANONYMOUS
        features: WANT_CLIENT_FIRST|PROXY_AUTHENTICATION
Plugin "anonymous" [loaded],    API version: 4
        SASL mechanism: ANONYMOUS, best SSF: 0
        security flags: NO_PLAINTEXT
        features: WANT_CLIENT_FIRST
Plugin "EXTERNAL" [loaded],     API version: 4
        SASL mechanism: EXTERNAL, best SSF: 0
        security flags: NO_ANONYMOUS|NO_PLAINTEXT|NO_DICTIONARY
        features: WANT_CLIENT_FIRST|PROXY_AUTHENTICATION
[root@temdev10 ~]# rpm -ql | grep cyrus
rpmq: no arguments given for query
[root@temdev10 ~]# rpm -qa | grep cyrus
cyrus-sasl-plain-2.1.22-5.el5_4.3
cyrus-sasl-gssapi-2.1.22-5.el5_4.3
cyrus-sasl-devel-2.1.22-5.el5_4.3
cyrus-sasl-2.1.22-5.el5_4.3
cyrus-sasl-lib-2.1.22-5.el5_4.3

On Thu, Feb 14, 2013 at 8:44 PM, Dan White <dwhite@olp.net> wrote:
> On 02/14/13 12:19 +0100, Michele wrote:
>>
>> Hi all,
>>
>> I'm trying to build OpenLDAP enabling the GSSAPI module, but I can't find
>> any reference on that in the configure file.
>> I'm doing that because I'm writing a client program that want to login
>> to a Windows AD via kerberos.
>> Any help is appreciated.
>
>
> You'll need to install the cyrus sasl gssapi plugin. Use 'pluginviewer' to
> view your current list of installed plugins.
>
> --
> Dan White