| View previous topic :: View next topic |
| Author |
Message |
caefer
Apprentice
Joined: 14 Jan 2003
Posts: 170
Location: Hamburg, Germany
|
 Posted: Tue Mar 30, 2004 5:49 pm Post subject: LDAP + SASL problems |
 |
|
hi!
I am following http://www.gentoo.org/doc/en/ldap-howto.xml as an ldap newbie.
I replaced 'genfic' with 'home' and 'com' with 'lan', since my domainname is 'home.lan'.
now I get these errors:
| Code: |
# ldapsearch -D "cn=Manager,dc=zuhause,dc=lan" -W
[...]
ldap_get_values
ber_scanf fmt ({x{{a) ber:
ber_dump: buf=0x080750a0 ptr=0x080750a3 end=0x080750f8 len=85
0000: 64 53 04 00 30 4f 30 4d 04 17 73 75 70 70 6f 72 dS..0O0M..suppor
0010: 74 65 64 53 41 53 4c 4d 65 63 68 61 6e 69 73 6d tedSASLMechanism
0020: 73 31 32 04 06 47 53 53 41 50 49 04 08 43 52 41 s12..GSSAPI..CRA
0030: 4d 2d 4d 44 35 04 0a 44 49 47 45 53 54 2d 4d 44 M-MD5..DIGEST-MD
0040: 35 04 05 4c 4f 47 49 4e 04 05 50 4c 41 49 4e 04 5..LOGIN..PLAIN.
0050: 04 4e 54 4c 4d .NTLM
ber_scanf fmt ([v]) ber:
ber_dump: buf=0x080750a0 ptr=0x080750c4 end=0x080750f8 len=52
0000: 31 32 04 06 47 53 53 41 50 49 04 08 43 52 41 4d 12..GSSAPI..CRAM
0010: 2d 4d 44 35 04 0a 44 49 47 45 53 54 2d 4d 44 35 -MD5..DIGEST-MD5
0020: 04 05 4c 4f 47 49 4e 04 05 50 4c 41 49 4e 04 04 ..LOGIN..PLAIN..
0030: 4e 54 4c 4d NTLM
ldap_msgfree
ldap_interactive_sasl_bind_s: server supports: GSSAPI CRAM-MD5 DIGEST-MD5 LOGIN PLAIN NTLM
ldap_int_sasl_bind: GSSAPI CRAM-MD5 DIGEST-MD5 LOGIN PLAIN NTLM
SASL/GSSAPI authentication started
ldap_perror
ldap_sasl_interactive_bind_s: Local error (82)
additional info: SASL(-1): generic failure: GSSAPI Error: Miscellaneous failure (No credentials cache found)
|
but that does not show anything more..
any hints?
regards
/christian |
|
| Back to top |
|
 |
giblet
n00b
Joined: 28 Jan 2004
Posts: 38
|
| Posted: Wed Mar 31, 2004 4:36 am Post subject: |
|
|
looks like it's trying to perform kerberos authentication, which you may or may not have configured...since i don't use it myself i don't know how to get that going, but i would suggest not using GSSAPI for authentication...when i set my network up i was also having problems with it, disabling it completely did the trick 
disclaimer: my ldap server is not on a gentoo box (its a freebsd box), but GSSAPI wasnt working for me either, getting rid of it everything worked |
|
| Back to top |
|
|
|
|
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
|
|
Networking & Security
