Finally, I did a combination of SSL + SASL:
q...@durian(pts/1):/[44]$ ldapsearch -Y GSSAPI -H
'ldaps://13.198.98.35:636' -b 'dc=sesswin2003,dc=com' -s sub -LLL 'cn=qxu'
mail
SASL/GSSAPI authentication started
ldap_sasl_interactive_bind_s: Inappropriate authentication (48)
additional info: 00002029: LdapErr: DSID-0C09016D, comment: Cannot
start kerberos signing/sealing when using TLS/SSL, data 0, vece
==============================================
The error is the same as when I use MozLDAP.
Try to add an option -o secprop="maxssf=0" or similar.
So, can I say SASL can't work together with SSL?
Thanks,
Xu Qiang=
Markus
_______________________________________________
dev-tech-ldap mailing list
[email protected]
https://lists.mozilla.org/listinfo/dev-tech-ldap