Re: SASL GSSAPI binds

[Quanah Gibson-M. <qu...@st...>]

--On Wednesday, February 05, 2003 3:32 AM +0100 Maurice Massar 
<rm@IT.Fh-Worms.DE> wrote:

> hi,
>
>> Followup on this:
>>
>> Thanks to help from Maurice, I can now bind & search my openldap-2.1.12
>> server.  The problem is that Authen::SASL::Cyrus is not sending an empty
>> AuthZID by default, which is bad behaviour.  Changing my sasl piece in
>> my  script to:
>>
>> my $sasl = Authen::SASL->new(
>>                              mechanism=>'GSSAPI',
>>                              callback=> {
>>                                          'user'=> sub {''},
>>                                          'password'=> sub {''},
>>                              },
>> );
>>
>> Fixes the problem.  Thank you again, Maurice!!
>
> interesting... I first had to rewrite the Authen::SASL::Cyrus::Security
> module to do things a bit more like IO::Socket::SSL before I got it
> working (with perl v5.8.0) (patch (or hack? *g*) attached).
>
> As posted earlier I got this messages:
> Use of uninitialized value in print at ./ldap-test1 line 18.
> syswrite() on unopened filehandle GLOB at /usr/share/perl5/Net/LDAP.pm
> line 627. [line 18 of ./ldap-test1 is: print "FD:
> ",fileno($ldap->socket()),"\n";]

Maurice,

I wonder if the major difference here is that I'm using perl 5.6.1.

--Quanah

--
Quanah Gibson-Mount
Senior Systems Administrator
ITSS/TSS/Computing Systems
Stanford University
GnuPG Public Key: http://www.stanford.edu/~quanah/pgp.html