perl-ldap-dev

Re: GSSAPI, Authen::SASL{::Cyrus} and Net::LDAP

[Quanah Gibson-M. <qu...@st...>]

Just out of curiousity,

has _anyone_ gotten GSSAPI with Cyrus-SASL to work with the Net::LDAP, 
Authen::SASL, and Authen::SASL::Cyrus modules to work?  There seems to be 
something seriously broken in the current implementation somewhere between 
Net::LDAP and Authen::SASL when working with the Authen::SASL:Cyrus & its 
security properties.

All I ever get is the error:

SASL(-13): authentication failure: GSSAPI Failure: gss_accept_sec_context 
at ./sasl2.pl line 11.

Using perl-ldap 0.26
Authen-SASL-2.02
Authen-SASL-Cyrus-0.05

--Quanah

--
Quanah Gibson-Mount
Senior Systems Administrator
ITSS/TSS/Computing Systems
Stanford University
GnuPG Public Key: http://www.stanford.edu/~quanah/pgp.html

Re: GSSAPI, Authen::SASL{::Cyrus} and Net::LDAP

[Gerald (J. C. <je...@sa...>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On Tue, 5 Nov 2002, Quanah Gibson-Mount wrote:

> has _anyone_ gotten GSSAPI with Cyrus-SASL to work with the Net::LDAP, 
> Authen::SASL, and Authen::SASL::Cyrus modules to work?  There seems to be 
> something seriously broken in the current implementation somewhere between 
> Net::LDAP and Authen::SASL when working with the Authen::SASL:Cyrus & its 
> security properties.
> 
> All I ever get is the error:
> 
> SASL(-13): authentication failure: GSSAPI Failure: gss_accept_sec_context 
> at ./sasl2.pl line 11.
> 
> Using perl-ldap 0.26
> Authen-SASL-2.02
> Authen-SASL-Cyrus-0.05

Did you run kinit first ?




cheers, jerry
 ---------------------------------------------------------------------
 Hewlett-Packard           ------------------------- http://www.hp.com
 SAMBA Team                ---------------------- http://www.samba.org
 GnuPG Key                 ---- http://www.plainjoe.org/gpg_public.asc
 ISBN 0-672-32269-2        "SAMS Teach Yourself Samba in 24 Hours" 2ed
 "I never saved anything for the swim back."     Ethan Hawk in Gattaca

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.0 (GNU/Linux)
Comment: For info see http://quantumlab.net/pine_privacy_guard/

iD8DBQE9yhnVIR7qMdg1EfYRAgmtAKCt2PSWTnW6jzSmc3yjn2sDuconMgCeMzDf
7CLMGiUYlkFaKZxmMZ/JNNM=
=o5eR
-----END PGP SIGNATURE-----

Re: GSSAPI, Authen::SASL{::Cyrus} and Net::LDAP

[Quanah Gibson-M. <qu...@st...>]

--On Thursday, November 07, 2002 1:44 AM -0600 "Gerald (Jerry) Carter" 
<je...@sa...> wrote:

> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
> On Tue, 5 Nov 2002, Quanah Gibson-Mount wrote:
>
>> has _anyone_ gotten GSSAPI with Cyrus-SASL to work with the Net::LDAP,
>> Authen::SASL, and Authen::SASL::Cyrus modules to work?  There seems to
>> be  something seriously broken in the current implementation somewhere
>> between  Net::LDAP and Authen::SASL when working with the
>> Authen::SASL:Cyrus & its  security properties.
>>
>> All I ever get is the error:
>>
>> SASL(-13): authentication failure: GSSAPI Failure:
>> gss_accept_sec_context  at ./sasl2.pl line 11.
>>
>> Using perl-ldap 0.26
>> Authen-SASL-2.02
>> Authen-SASL-Cyrus-0.05
>
> Did you run kinit first ?

Yes, and I have a valid K5 ticket.  Using ldapsearch with GSSAPI I can bind 
to my openldap servers without problem.

--Quanah

--
Quanah Gibson-Mount
Senior Systems Administrator
ITSS/TSS/Computing Systems
Stanford University
GnuPG Public Key: http://www.stanford.edu/~quanah/pgp.html

Re: GSSAPI, Authen::SASL{::Cyrus} and Net::LDAP

[Quanah Gibson-M. <qu...@st...>]

--On Thursday, November 07, 2002 5:58 AM -0800 Quanah Gibson-Mount 
<qu...@St...> wrote:

>
>
> --On Thursday, November 07, 2002 1:44 AM -0600 "Gerald (Jerry) Carter"
> <je...@sa...> wrote:
>
>> -----BEGIN PGP SIGNED MESSAGE-----
>> Hash: SHA1
>>
>> On Tue, 5 Nov 2002, Quanah Gibson-Mount wrote:
>>
>>> has _anyone_ gotten GSSAPI with Cyrus-SASL to work with the Net::LDAP,
>>> Authen::SASL, and Authen::SASL::Cyrus modules to work?  There seems to
>>> be  something seriously broken in the current implementation somewhere
>>> between  Net::LDAP and Authen::SASL when working with the
>>> Authen::SASL:Cyrus & its  security properties.
>>>
>>> All I ever get is the error:
>>>
>>> SASL(-13): authentication failure: GSSAPI Failure:
>>> gss_accept_sec_context  at ./sasl2.pl line 11.
>>>
>>> Using perl-ldap 0.26
>>> Authen-SASL-2.02
>>> Authen-SASL-Cyrus-0.05
>>
>> Did you run kinit first ?
>
> Yes, and I have a valid K5 ticket.  Using ldapsearch with GSSAPI I can
> bind to my openldap servers without problem.

One other quick note -- It gets far enough along in the exchange to get an 
ldap/<host> tgt.

--Quanah

--
Quanah Gibson-Mount
Senior Systems Administrator
ITSS/TSS/Computing Systems
Stanford University
GnuPG Public Key: http://www.stanford.edu/~quanah/pgp.html