Re: ldap 0.4001 not working with sasl 2.15 (GSSAPI)

Hi Dale, I tried this and it fails No SASL mechanism found .../Authen/SASL.pm line 77 Markus "Dale Moore" wrote in message news:25377.9927305461$1286384...@news.gmane.org... I think that another way to state what Graham is saying is that you now need to connect via SASL/GSSAPI with the fo

ldap 0.4001 not working with sasl 2.15 (GSSAPI)

I have the below perl program which works fine with perl-ldap 0.34 and sasl 2.10, but after upgrading to perl-ldap 0.4.001 and sasl 2.15 it fails. When I look at the ldap traffic I see the following: LDAP 0.34 SASL 2.10 bindRequest(1) "" sasl bindResponse(1) saslBindInProgess bindRequest(2)

Odd behaviour of perl-ldap-0.39 with GSSAPI on Solaris 10

ExpiresService principal 11/20/09 09:28:38 11/20/09 09:33:38 krbtgt/win2003r2.h...@win2003r2.home 11/20/09 09:28:38 11/20/09 09:33:38 ldap/w2k3r2.win2003r2.h...@win2003r2.home LDAP Attributes: User-Mail = markus.moel...@win2003r2.home User-Display-Name = Markus Moeller User-SamAccountNam

Re: perl-ldap-0.39 dependencies for GSSAPI authentication

Sorry, but I don't see the difference between 0.39 which I use and the git version. Markus "Graham Barr" wrote in message news:a0711f99-e501-4010-af4e-0259db1c4...@pobox.com... On Nov 16, 2009, at 3:04 PM, Markus Moeller wrote: I have an OpenSolaris system which has perl

perl-ldap-0.39 dependencies for GSSAPI authentication

I have an OpenSolaris system which has perl 5.8.4 installed as part of the OpenSolaris install on which I installed Net::LDAP, GSSAPI, Authen::Krb5, Net::DNS with all dependencies. When I run my perl script I get an error ./LDAP-AD-query.pl GSSAPI Error (init): Unspecified GSS failure. Minor

Re: Cannot start kerberos signing/sealing when using TLS/SSL

"Quanah Gibson-Mount" wrote in message news:13eb6539f13316bc67e85...@[192.168.1.199]... --On Sunday, November 15, 2009 10:36 PM +0000 Markus Moeller wrote: It might be an AD setting (enforcing SSL). But does it make sense to use SASL/GSSAPI encryption on top of SSL ? Well, gi

Re: Cannot start kerberos signing/sealing when using TLS/SSL

15, 2009 9:09 PM +0000 Markus Moeller wrote: I think this would fix it I think AD must be broken and non RFC compliant. I've never had problems using SASL/GSSAPI encryption at the same time as SSL/TLS encryption. It wouldn't be the first time MS AD was broken in obvious ways.

Re: Cannot start kerberos signing/sealing when using TLS/SSL

asl_conn->property( + maxssf => 0, +) if ($ldap->{scheme} eq 'ldaps'), my $initial = $sasl_conn->client_start; Markus "Markus Moeller" wrote in message news:hdpgn1$9i...@ger.gmane.org... I get the following error when I use LDAPS with SASL/GSSAPI auth

Cannot start kerberos signing/sealing when using TLS/SSL

I get the following error when I use LDAPS with SASL/GSSAPI authentication to Active Directory. The error occurs because SASL/GSSAPI tries to encrypt the connection although SSL encryption is already used. This can be disabled by setting the sasl security property maxssf to 0, but it seems not

Re: Force the new AD user to change password - pwdLastSet

Alexander, Account disabled means that the useraccountcontrol is increased by 2 (decimal) and account disabled = false means you add 0 to the useraccountcontrol, See http://support.microsoft.com/kb/305144 Markus "Alexander Farber" <[EMAIL PROTECTED]> wrote in message news:[EMAIL PROTECTED]

Re: Setting security options when using ldap with sasl

loop over connection_property { $sasl_conn->property( $sasl->connection_property ->name[$i] => $sasl->connection_property ->value[$i], ); } As you can see I am not a perl programmer. Any suggestion how to best implement this ? Thank you Markus &q

Re: release of perl-ldap-0.36 and Authen-SASL-2.11

It seems to be related with Cyrus SASL. If I select use Authen::SASL qw(Perl); it works but with use Authen::SASL; it fails with the mentioned error. Markus "Markus Moeller" <[EMAIL PROTECTED]> wrote in message news:[EMAIL PROTECTED] BTW I use sasl to authenticate ( I t

Re: release of perl-ldap-0.36 and Authen-SASL-2.11

BTW I use sasl to authenticate ( I tried both Authen-SASL-2.10 and 2.11) Markus "Markus Moeller" <[EMAIL PROTECTED]> wrote in message news:[EMAIL PROTECTED] I noticed a problem with perl-ldap-0.36 compared to perl-ldap-0.34. I have the following simple code $mesg

Re: release of perl-ldap-0.36 and Authen-SASL-2.11

I noticed a problem with perl-ldap-0.36 compared to perl-ldap-0.34. I have the following simple code $mesg = $ldap->search( # perform a search base => $bind_path, filter => "(userprincipalname=$user)", timelimit =>

Re: Setting security options when using ldap with sasl

Does nobody else experienced my problem ? Any hint how I could debug it ? Thank you Markus "Markus Moeller" <[EMAIL PROTECTED]> wrote in message news:[EMAIL PROTECTED] At the moment I use Authen:SASL as follows use Net::LDAPS; use Authen::SASL; use Authen::Krb5; $ldap =

Re: Setting security options when using ldap with sasl

At the moment I use Authen:SASL as follows use Net::LDAPS; use Authen::SASL; use Authen::Krb5; $ldap = Net::LDAPS->new( $server, port => 636, timeout => 2, verify => 'never', version => 3) or

Setting security options when using ldap with sasl

How can I set SASL security options ? I want to use ldap with SASL/GSSAPI and control the maxssf security setting. Is this part of Net::LDAP or Authen::SASL ? Thank you Markus

Re: Problem with array of hosts in Net:LDAP(S)->new

That helped. I am only wondering why then '192.168.1.12 192.168.1.18' was working and didn't give an error. Thank you Markus "Peter Marschall" <[EMAIL PROTECTED]> wrote in message news:[EMAIL PROTECTED] Hi, On Sunday, 10. February 2008, Markus Moeller wrote:

Problem with array of hosts in Net:LDAP(S)->new

I am new to LDAP.pm and like to query several ldap servers for redundancy/failover. The documentation says that the host can be an array: "HOST may also be a reference to an array of hosts, host-port pairs or URIs to try. Each will be tried in order until a connection is made. Only when all h