-----Original Message----- From: Howard Chu [mailto:hyc@symas.com] Sent: Friday, August 07, 2009 1:15 PM To: Xu, Qiang (FXSGSC) Cc: openldap-technical@openldap.org Subject: Re: Finding Kerberos server from IPv6 address in SASL binding
Have you read the ldapsearch(1) manpage? Have you already tried the "-d" debug option?
Blushed... Just read the manpage carefully, and use the option "-d -1" (ldap_log.h shows -1 means LDAP_DEBUG_ANY). I got screens of output, around 1000 lines.
However, from the output, I still can't figure out who in the process locate the Kerberos server (resolved by DNS to IPv6 address) and sent out TGS-REQ. Could you shed some light on it?
Thanks, Xu Qiang