Hi Timm,

Please provide the following output:

ldd /usr/lib/x86_64-linux-gnu/sasl2/libgssapiv2.so.2.0.25

Do you see any errors listed within /var/log/auth.log when you start slapd?

Is your keytab in any location other than /etc/krb5.keytab? If so, what
method did you use to specify its location?

On 06/21/12 10:27 +0200, Timm Wunderlich wrote:
Package: libsasl2-modules-gssapi-heimdal:amd64
Version: 2.1.25.dfsg1-4+b1

With "libsasl2-modules-gssapi-heimdal" i get no GSSAPI module in the supportedSASLMechanisms list from slapd. "libsasl2-modules-gssapi-mit" works fine but i cannot use it since i have a heimdal kdc.

What conflict do you have in this scenario? A package dependency issue or
some problem with the -mit version talking to a heimdal kdc?

Example:

$ dpkg -l libsasl2-modules-gssapi-heimdal
ii libsasl2-modules-gssapi-heimdal:amd64 2.1.25.dfsg1-4+b1 Pluggable Authentication Modules for SASL (GSSAPI)

$ ldapsearch -H ldap://127.0.0.1/ -x -b "" -s base -LLL supportedSASLMechanisms
dn:
supportedSASLMechanisms: DIGEST-MD5
supportedSASLMechanisms: CRAM-MD5
supportedSASLMechanisms: NTLM



with "libsasl2-modules-gssapi-mit" i get:

$ dpkg -l libsasl2-modules-gssapi-mit
ii libsasl2-modules-gssapi-mit:amd64 2.1.25.dfsg1-4+b1 Cyrus SASL - pluggable authentication modules (GSSAPI)

$ ldapsearch -H ldap://127.0.0.1/ -x -b "" -s base -LLL supportedSASLMechanisms
dn:
supportedSASLMechanisms: SCRAM-SHA-1
supportedSASLMechanisms: GS2-IAKERB
supportedSASLMechanisms: GS2-KRB5
supportedSASLMechanisms: GSSAPI
supportedSASLMechanisms: DIGEST-MD5
supportedSASLMechanisms: CRAM-MD5
supportedSASLMechanisms: NTLM


I am using Debian GNU/Linux Wheezy AMD64, kernel 3.2.0-2-amd64, slapd 2.4.28-1.1, heimdal kdc 1.6~git20120403+dfsg1-2, all just binaries from Wheezy repo...

Regards,
Timm Wunderlich

--
Dan White



--
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Reply via email to