Re: SASL/GSSAPI problems

[<mi...@st...>]

Hans Aschauer wrote:
> [to list and OP]
> 
> On Saturday 30 October 2004 02:07, Wido Depping wrote:
> 
>>SASL/GSSAPI authentication started
>>Error during LDAP bind request
>>Reason: {'info': 'SASL(0): successful result: ', 'desc': 'Local error'}
> 
> This error is most likely due to a wrong setup of kerberos <-> LDAP, and has 
> probably nothing to do with python-ldap.

I agree. One would also need to know which version of heimdal or MIT 
Kerberos and which kind of KDC this happens with.

E.g. I did get such errors when using a earlier version of heimdal with a 
KDC of W2K3 Active Directory. In my case this was solved by upgrading 
heimdal. Your mileage may vary.

> So SASL/GSSAPI will work only if it 
> also works using ldapsearch (and vice versa(?)).

Yes. Best advice is to test with OpenLDAP's command-line tool ldapsearch.

Ciao, Michael.