Re: Kerberized LDAP not accessible

Am 21.01.2011 13:15, schrieb Brian Candler:

On Fri, Jan 21, 2011 at 11:45:53AM +0100, Thomas Schweikle wrote:

...

client:~$ ldapsearch -H ldap://srv.example.com SASL/DIGEST-MD5 authentication started

Try adding -Y GSSAPI to ldapsearch command line.

I found the same (that DIGEST-MD5 was being preferred over GSSAPI). You can fix it by disabling DIGEST-MD5.

Under Ubuntu, I did this by

# vi /etc/ldap/sasl2/slapd.conf
mech_list: gssapi external

The location of this config file may differ under other distros.

I do have the directory, but not the file ... do I have to create it myself or is it part of a package I did not install?