Question about LDAP backend

Javier Palacios javiplx at gmail.com
Wed Jul 25 14:20:14 EDT 2012


On Wed, Jul 25, 2012 at 6:13 PM, Greg Hudson <ghudson at mit.edu> wrote:

> On 07/25/2012 05:26 AM, Javier Palacios wrote:
> > But looks like ldapi is just ignored by kdb5_ldap_util. Does anyone else
> > have some idea or should I file a bug report?
>
> We don't have support for SASL authentication in our LDAP back end, so
> the KDC can't use SASL EXTERNAL to autobind over ldap.  So you still
> have to specify a BIND DN and password like you would normally.
>

OK. But as far as I understand, SASL EXTERNAL is somewhat equivalent to
ldapi, and documentation states that ldapi is a valid protocol to
communicate with ldap, which does not look the case.

Javier Palacios


More information about the Kerberos mailing list