Re: Authenticating with Cyrus SASL

[Quanah Gibson-M. <qu...@st...>]

--On Thursday, November 07, 2002 2:53 PM -0500 Mark Adamson 
<ad...@an...> wrote:


> I just now uploaded a 0.06 module.  I haven't done heavy testing of it
> since there are those anxious to get their hands on it.  Appended below is
> the patch to Cyrus.xs, and you will need to tell Makefile.PL to grab the
> sasl2 library.

Okay,

A little bit further investigation reveals that I'm getting a result code 
in Bind.pm of 49 (invalid credentials), not LDAP_SUCCESS, so it never 
creates the securesocket.  There is something simply wrong in the manner in 
which it is binding to the ldap machine for this to be occurring, since I 
can do an ldapsearch with my credentials without problem.

more sasl2.pl
#!/usr/local/bin/perl -w
use Net::LDAP;
use Authen::SASL;

my $ldap = Net::LDAP->new('ldap.stanford.edu', version=>3) || die "$@";

my $joe = Authen::SASL->new(mechanism=> 'GSSAPI', 
host=>'ldap.stanford.edu', user=>'quanah', service=>'ldap');

my $mesg = $ldap->bind('', sasl=> $joe);

$mesg->code && die $mesg->error;

SASL(-13): authentication failure: GSSAPI Failure: gss_accept_sec context 
at ./sasl2.pl line 11.

--Quanah

--
Quanah Gibson-Mount
Senior Systems Administrator
ITSS/TSS/Computing Systems
Stanford University
GnuPG Public Key: http://www.stanford.edu/~quanah/pgp.html