Re: ldap.sasl.gssapi example?

[Gavin D. <gdo...@an...>]

I'm running the Python script from an interactive shell, and I have a=20
Kerberos ticket. So far, everything is running as me with my tickets. As=20
far as the Python script having access -- well, as far as I can=20
understand things it *should* have access via the native sasl library=20
which, using GSSAPI, should go grab my ticket and present it to the LDAP=20
server. However, I think either the sasl_bind_interactive method is=20
broken or I'm not giving it the right information.

Michael Str=F6der wrote:
> Gavin Doughtie wrote:
>=20
>> I need to use Kerberos authentication through GSSAPI to talk to our=20
>> LDAP server.
>=20
>=20
> I don't have personal experience with such a setup.
>=20
>>  I have a valid Kerberos ticket granting ticket, and I can use the=20
>> ldapadd utility to accomplish what I want on the server in question,
>> [..]
>> ldap.LOCAL_ERROR: {'desc': 'Local error'}
>=20
>=20
> Just guessing:
>=20
> Is the Python script running as the same user as your ldapadd test?
>=20
> Does the Python script have access to the Kerberos ticket?
>=20
> Ciao, Michael.

--=20
Gavin Doughtie
DreamWorks SKG