[krbdev.mit.edu #8167] LDAP KDB module does not build against Solaris native LDAP library
Greg Hudson via RT
rt-comment at krbdev.mit.edu
Mon Apr 13 12:37:38 EDT 2015
kdb_ldap_conn.c fails to build because LDAP_SASL_QUIET is not
defined. We pass this value to ldap_sasl_interactive_bind_s() in the
flags parameter.
The semantics of this parameter seem to be rather poorly defined
across implementations. OpenLDAP defines and documents three values,
LDAP_SASL_{AUTOMATIC,INTERACTIVE,QUIET}. The documentation says they
determine when prompting is performed. However, it only seems to
respond to LDAP_SASL_QUIET, and prints informational messages to
stderr if that value is not used.
Solaris defines only LDAP_SASL_INTERACTIVE, and its implementation of
ldap_sasl_interactive_bind_s() simply errors out if that flag is not
specified. The man page at
http://docs.oracle.com/cd/E36784_01/html/E36875/ldap-sasl-
interactive-bind-s-3ldap.html just says "The LDAP_SASL_INTERACTIVE
option flag is passed to the libldap API through the flags argument
of the API. The flag tells the API to use the SASL interactive mode
and to have the API request SASL authentication data through the
LDAP_SASL_INTERACTIVE_PROC callback as needed."
More information about the krb5-bugs
mailing list