Hello Thomas,<br><br><div class="gmail_quote">2011/1/21 Thomas Schweikle <span dir="ltr">&lt;<a href="mailto:tps@vr-web.de">tps@vr-web.de</a>&gt;</span><br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex;">
Hi!<br>
<br>
I kerberized ldap:<br>
</blockquote><div><br></div><div>Maybe you missed &quot;olcAuthzPolicy&quot;</div><div> </div><div><br></div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex;">client:~$ ldapsearch -H ldap://<a href="http://srv.example.com" target="_blank">srv.example.com</a><br>

SASL/DIGEST-MD5 authentication started<br></blockquote><div><br></div><div>Is not using GSSAPI.</div><div><br></div><div>Does your slapd have a kerberos principal (ldap/<a href="http://srv.example.com">srv.example.com</a>@<a href="http://EXAMPLE.COM">EXAMPLE.COM</a>) ?</div>
<div><br></div><div>Did you tell slapd where its kerberos keytab file is (export KRB5_KTNAME=/path/to/keytab)?</div><div><br></div><div>Regards,</div><div>Norberto</div></div>