(ITS#6770) Proxy authorization fails with SASL-GSSAPI

Full_Name: Jaap Winius Version: 2.4.23-7 OS: Debian squeeze URL: Submission from: (NULL) (2001:888:10:d5f::2)

Proxy authorization works with SIMPLE binds, as well as with SASL binds using various other mechanisms, but not with SASL and GSSAPI. In that case it may only work initially, but eventually the problem is that, for no apparent reason, the consumer instead attempts to use a SIMPLE bind to authenticate itself to the provider. Naturally, this fails.

For detailed background and debugging info, see this thread:

http://www.openldap.org/lists/openldap-technical/201101/msg00002.html