Bug#703113: libsasl2-modules-gssapi-mit: Java client GSSAPI connections to OpenLDAP fail

[Bill MacAllister]

--On Saturday, March 16, 2013 07:03:38 PM -0500 Dan White <dwhite at olp.net> wrote:

> On 03/15/13 01:47 -0700, Bill MacAllister wrote:
>> Package: libsasl2-modules-gssapi-mit
>> Version: 2.1.25.dfsg1-6
>> Severity: important
>>
>> Dear Maintainer,
>>
>> We are starting the process of upgrading our LDAP service to OpenLDAP
>> 2.4.34 on wheezy.  None of the Java applications that we have tested
>> can connect to the LDAP server using GSSAPI.
>
> Can you reproduce this problem using ldapwhoami on the client?

No I can't.

trainmaster% ldapwhoami -h ldap-dev1
SASL/GSSAPI authentication started
SASL username: whm at stanford.edu
SASL SSF: 56
SASL data security layer installed.
dn:uid=whm,cn=accounts,dc=stanford,dc=edu

Also ldapsearch works fine.  And an assortment of perl scripts that
use both Net::LDAP and Net::LDAPapi don't appear to have a problem.

Bill


-- 

Bill MacAllister
Infrastructure Delivery Group, Stanford University