--On Monday, October 19, 2009 3:46 PM -0700 Quanah Gibson-Mount quanah@zimbra.com wrote:
This problem is also seen with Net::LDAPapi perl module, so it is library rather than tool specific.
It seems to be SASL specific as well (Stanford uses GSSAPI binds). I modified one of the problematic servers to have access to * by * read as its only ACL, and then did two searches. One using SASL/GSSAPI and one using anonymous query. The anonymous query succeeded across multiple runs. The SASL/GSSAPI query failed to complete.
This was with a 2.4.19 ldapsearch binary against a remote 2.4.19 slapd.
--Quanah
--
Quanah Gibson-Mount Principal Software Engineer Zimbra, Inc -------------------- Zimbra :: the leader in open source messaging and collaboration