Re: Connections established using SASL die after search

[<mi...@st...>]

Mark Roach wrote:
> 
> I'm on Ubuntu. Relevant versions of software are:
> 
> SERVER:
>     slapd: 2.1.30
>     libkrb53: 1.3.4
>     libsasl2: 2.1.19
>     libsasl2-gssapi-mit: 2.1.18
> 
> CLIENT:
>     libsasl2: 2.1.19
>     libsasl2-gssapi-mit: 2.1.18
>     python-ldap: 2.0.4
> 
> I guess I'll have to try upgrading my openldap stuff,

Upgrading would be good. AFAIK the MIT Kerberos implementation is not 
thread-safe. This can lead to very weird effects depending how 
OpenLDAP's slapd is built. Use a recent heimdal release instead.

Ciao, Michael.