Pat Riehecky wrote:
I was about to configure kerberos connections to my test OpenLDAP system (2.4.7, debian sid packages) when I discovered an oddity....
# ldapsearch -x -b "" -s base -LLL supportedSASLMechanisms dn: supportedSASLMechanisms: CRAM-MD5 supportedSASLMechanisms: DIGEST-MD5 supportedSASLMechanisms: LOGIN supportedSASLMechanisms: PLAIN supportedSASLMechanisms: NTLM
I don't see GSSAPI in the list.
Probably your SASL installation does not have the GSSAPI plugin installed (check for /usr/lib/sasl2/*gssapi*) or the required Kerberos libs are also missing.
Ciao, Michael.