https://bugs.openldap.org/show_bug.cgi?id=10351
Issue ID: 10351 Summary: olcSaslHost lacks default value Product: OpenLDAP Version: 2.5.13 Hardware: x86_64 OS: Linux Status: UNCONFIRMED Keywords: needs_review Severity: normal Priority: --- Component: slapd Assignee: bugs@openldap.org Reporter: fredrik@falk-net.se Target Milestone: ---
I'm trying to configure multi-master replication with SASL for cn=config and some other databases. However, I'm running into an issue with GSSAPI/SASL as it also syncs olcSaslHost, which has to be unique to each host in order to work.
I'd like if olcSaslHost was left empty then it'd default to the hostname/FQDN of the host running slapd, which would resolve the issue.
This issue has been encountered before: https://www.openldap.org/lists/openldap-technical/201508/msg00124.html https://www.openldap.org/lists/openldap-technical/201001/msg00048.html
https://bugs.openldap.org/show_bug.cgi?id=10351
--- Comment #1 from Quanah Gibson-Mount quanah@openldap.org --- It's not generally required to set olcSASLHost for SASL/GSSAPI, curious why you need to configure it in your situation?
https://bugs.openldap.org/show_bug.cgi?id=10351
fredrik@falk-net.se changed:
What |Removed |Added ---------------------------------------------------------------------------- Status|UNCONFIRMED |RESOLVED Resolution|--- |INVALID
--- Comment #2 from fredrik@falk-net.se --- (In reply to Quanah Gibson-Mount from comment #1)
It's not generally required to set olcSASLHost for SASL/GSSAPI, curious why you need to configure it in your situation?
For a while SASL/GSSAPI auth was failing if I did not specify it, but checking it again now it seems like it isn't needed. Must've been a misconfiguration elsewhere. Apologies.
-
openldap-its＠openldap.org