[Pkg-openldap-devel] ldap/localhost TGS requested for remote ldapsearch request

[Ryan Tandy]

On Tue, Apr 17, 2018 at 04:52:53PM +0000, marlox at ouda.fr wrote:
>I found something that seem interesting and that should have solve my 
>issue in gssapi.c but, it seems ldapsearch prefer to use sasl.c.

The direct GSSAPI support is not enabled in Debian. It's incomplete 
upstream and likely to be removed anyway, as SASL is considered the 
standard; see https://openldap.org/its?findid=6567.

If there are things that gssapi.c does better than sasl.c, those could 
be logged in the upstream ITS as feature requests.

The GSSAPI support *is* enabled in Ubuntu, with some additional patches.