[krbdev.mit.edu #8167] LDAP KDB module does not build against Solaris native LDAP library

Greg Hudson via RT rt-comment at krbdev.mit.edu
Mon Apr 13 12:37:38 EDT 2015


kdb_ldap_conn.c fails to build because LDAP_SASL_QUIET is not 
defined.  We pass this value to ldap_sasl_interactive_bind_s() in the 
flags parameter.

The semantics of this parameter seem to be rather poorly defined 
across implementations.  OpenLDAP defines and documents three values, 
LDAP_SASL_{AUTOMATIC,INTERACTIVE,QUIET}. The documentation says they 
determine when prompting is performed.  However, it only seems to 
respond to LDAP_SASL_QUIET, and prints informational messages to 
stderr if that value is not used.

Solaris defines only LDAP_SASL_INTERACTIVE, and its implementation of 
ldap_sasl_interactive_bind_s() simply errors out if that flag is not 
specified.  The man page at 
http://docs.oracle.com/cd/E36784_01/html/E36875/ldap-sasl-
interactive-bind-s-3ldap.html just says "The LDAP_SASL_INTERACTIVE 
option flag is passed to the libldap API through the flags argument 
of the API. The flag tells the API to use the SASL interactive mode 
and to have the API request SASL authentication data through the 
LDAP_SASL_INTERACTIVE_PROC callback as needed."



More information about the krb5-bugs mailing list