UPDATE: Solaris-9 native "ldapsearch" : can Kerberos-ticket be used to bind with LDAP-server?

From: rob.de.langhe@belgacom.be
Date: Wed Jun 22 2005 - 11:51:17 EDT


Suggested by SUN, I installed their Directory Service Resource Kit
(downloadable), which contains more enhanced LDAP client programs such
as "ldapsearch".
I installed it in /opt/s1dsrk.

Using the command

[/opt/s1dsrk/bin/dsrk52/ldapsearch -h $ldapsrv -o mech=GSSAPI -b
"ou=unix,dc=our,dc=domain" -v "cn=*"

I get the message

ldap_sasl_interactive_bind_s: Unknown authentication method

Google or Sunsolve doesn't learn me anything more apart from referring
to OpenLDAP as client and/or iPlanet-Directory-Server as LDAP server.

According to our AD-administrators, their server correctly supports
GSSAPI.

Any hints to further troubleshoot this ?

Rob

-----Original Message-----
From: sunmanagers-bounces@sunmanagers.org
[mailto:sunmanagers-bounces@sunmanagers.org] On Behalf Of
rob.de.langhe@belgacom.be
Sent: 17 June 2005 09:26
To: sunmanagers@sunmanagers.org
Subject: Solaris-9 native "ldapsearch" : can Kerberos-ticket be used to
bind with LDAP-server?

Hi,

running Solaris-9 with its bundled LDAP client programs such as
"ldapsearch", I like to know if we can avoid compiling and installing
OpenLDAP to get support for Kerberos tickets for binding with the remote
LDAP-server.
searched Google, Sunsolve, but all I found was that OpenLDAP-version
"ldapsearch" has the options "-k" and "-K" (if compiled with Kerberos
support), nothing about the native Solaris-version of "ldapsearch".

Hoping for some good news,

Rob

**** DISCLAIMER ****
http://www.belgacom.be/maildisclaimer
_______________________________________________
sunmanagers mailing list
sunmanagers@sunmanagers.org
http://www.sunmanagers.org/mailman/listinfo/sunmanagers

**** DISCLAIMER ****
http://www.belgacom.be/maildisclaimer
_______________________________________________
sunmanagers mailing list
sunmanagers@sunmanagers.org
http://www.sunmanagers.org/mailman/listinfo/sunmanagers



This archive was generated by hypermail 2.1.7 : Wed Apr 09 2008 - 23:30:56 EDT