Am Wed, 22 Dec 2021 14:27:37 +0100 schrieb Stefan Kania stefan@kania-online.de:
Am 22.12.21 um 13:18 schrieb Dieter Klünter:
/* OpenLDAP SASL options */ [...] /* OpenLDAP GSSAPI options */ #define LDAP_OPT_X_GSSAPI_DO_NOT_FREE_CONTEXT 0x6200 #define LDAP_OPT_X_GSSAPI_ALLOW_REMOTE_PRINCIPAL 0x6201
Did you simply test by ldapwhoami(1) with all available Mechanism?
ldapwhoami -Y gssapi -U dieter -H ldapi:/// SASL/GSSAPI authentication started SASL username: dieter@MyREALM SASL SSF: 256 SASL data security layer installed. dn: ....
-Dieter