21 Jan
2011
21 Jan
'11
4:15 a.m.
On Fri, Jan 21, 2011 at 11:45:53AM +0100, Thomas Schweikle wrote:
client:~$ ldapsearch -H ldap://srv.example.com SASL/DIGEST-MD5 authentication started
Try adding -Y GSSAPI to ldapsearch command line.
I found the same (that DIGEST-MD5 was being preferred over GSSAPI). You can fix it by disabling DIGEST-MD5.
Under Ubuntu, I did this by
# vi /etc/ldap/sasl2/slapd.conf mech_list: gssapi external
The location of this config file may differ under other distros.