Am 22.12.21 um 10:31 schrieb Stefan Kania:
> either it's still a configuration problem, or it's missing. If it's a
> configuration problem, how can I fix it?

I now built OpenLDAP from source with this options:
--------------
./configure --enable-argon2 --with-argon2=libargon2 --with-cyrus-sasl
--with-tls=openssl --enable-overlays=mod --enable-backends=mod
--disable-perl --disable-ndb --enable-crypt --enable-modules
--enable-dynamic --enable-syslog --enable-debug --en    able-local
--enable-spasswd --disable-sql --prefix=/opt/openldap-current
--with-sasl=yes
--------------
Still no gssapi :-(. Did I miss something here?


--------------
root@ldap-p01:~# ldapsearch -x -H ldapi:/// -b "" -LLL -s base
supportedSASLMechanisms
dn:
supportedSASLMechanisms: DIGEST-MD5
supportedSASLMechanisms: EXTERNAL
supportedSASLMechanisms: NTLM
supportedSASLMechanisms: CRAM-MD5
supportedSASLMechanisms: LOGIN
supportedSASLMechanisms: PLAIN

root@ldap-p01:~# ldd /opt/openldap-current/libexec/slapd
        linux-vdso.so.1 (0x00007ffc23985000)
        libldap.so.2 => /opt/openldap-current/lib/libldap.so.2
(0x00007f160e666000)
        liblber.so.2 => /opt/openldap-current/lib/liblber.so.2
(0x00007f160e657000)
        libltdl.so.7 => /lib/x86_64-linux-gnu/libltdl.so.7
(0x00007f160e646000)
        libdl.so.2 => /lib/x86_64-linux-gnu/libdl.so.2 (0x00007f160e641000)
        libsasl2.so.2 => /lib/x86_64-linux-gnu/libsasl2.so.2
(0x00007f160e624000)
        libssl.so.1.1 => /lib/x86_64-linux-gnu/libssl.so.1.1
(0x00007f160e592000)
        libcrypto.so.1.1 => /lib/x86_64-linux-gnu/libcrypto.so.1.1
(0x00007f160e2a7000)
        libcrypt.so.1 => /lib/x86_64-linux-gnu/libcrypt.so.1
(0x00007f160e26d000)
        libresolv.so.2 => /lib/x86_64-linux-gnu/libresolv.so.2
(0x00007f160e253000)
        libpthread.so.0 => /lib/x86_64-linux-gnu/libpthread.so.0
(0x00007f160e232000)
        libc.so.6 => /lib/x86_64-linux-gnu/libc.so.6 (0x00007f160e071000)
        /lib64/ld-linux-x86-64.so.2 (0x00007f160e872000)

--------------
As long as I can't see "supportedSASLMechanisms: GSSAPI" I can't get the
kerberos-authentication working.

Attachment: smime.p7s
Description: S/MIME Cryptographic Signature

Reply via email to