Lukas Grässlin <lukas.graess...@adfinis.com> writes: > It's ldapsearch in all cases with libsasl2-modules-gssapi-mit:amd64 > 2.1.28+dfsg-10 on Debian and cyrus-sasl-gssapi-2.1.27-6.el8_5.x86_64 on > the RHEL machine.
I suspect you are being bitten by: https://web.mit.edu/Kerberos/krb5-devel/doc/admin/princ_dns.html#openldap-ldapsearch-etc (at the bottom of the page), which is not under the control of the Kerberos libraries. It's a very long-standing issue in Cyrus SASL that some of us used to patch locally. -- Russ Allbery (r...@debian.org) <https://www.eyrie.org/~eagle/>
