21 Jan
2011
21 Jan
'11
3:17 a.m.
Hello Thomas,
2011/1/21 Thomas Schweikle tps@vr-web.de
Hi!
I kerberized ldap:
Maybe you missed "olcAuthzPolicy"
client:~$ ldapsearch -H ldap://srv.example.com
SASL/DIGEST-MD5 authentication started
Is not using GSSAPI.
Does your slapd have a kerberos principal (ldap/srv.example.com@EXAMPLE.COM) ?
Did you tell slapd where its kerberos keytab file is (export KRB5_KTNAME=/path/to/keytab)?
Regards, Norberto