Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 7 Oct 2009 15:38:06 +1100
From:      John Marshall <john.marshall@riverwillow.com.au>
To:        Alexander Nedotsukov <bland@freebsd.org>
Cc:        John Baldwin <john@baldwin.cx>, Doug Rabson <dfr@freebsd.org>, Rick Macklem <rmacklem@uoguelph.ca>, George Mamalakis <mamalos@eng.auth.gr>, freebsd-current@freebsd.org
Subject:   Re: [PATCH] SASL problems with spnego on 8.0-BETA4
Message-ID:  <20091007043806.GN1086@rwpc12.mby.riverwillow.net.au>
In-Reply-To: <19306024-4C3D-41EC-A198-1652B047DF1A@FreeBSD.org>
References:  <4AB27FB6.4010806@eng.auth.gr> <20090921222241.GF1001@rwpc12.mby.riverwillow.net.au> <20091002081319.GN37304@rwpc12.mby.riverwillow.net.au> <200910020824.15488.john@baldwin.cx> <Pine.GSO.4.63.0910061856130.21826@muncher.cs.uoguelph.ca> <19306024-4C3D-41EC-A198-1652B047DF1A@FreeBSD.org>

next in thread | previous in thread | raw e-mail | index | archive | help

--oj4kGyHlBMXGt3Le
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

On Wed, 07 Oct 2009, 08:45 +0900, Alexander Nedotsukov wrote:
> Use this patch.=20

It worked for me (for _krb5 case).
  FreeBSD 8.0-RC1 #0: Fri Sep 18 13:35:00 AEST 2009 i386
  cyrus-sasl-2.1.23
  openldap-sasl-server-2.4.18_1

- Restored original /usr/bin/krb5-config
- Stopped LDAP server
- Re-built port security/cyrus-sasl2
- Started LDAP server
- Confirmed that attempted LDAP access with gssapi auth from a client
  failed and made the LDAP server die.
- Applied libgssapi_foo.patch and re-built kerberos5
- Re-built port security/cyrus-sasl2
- Started LDAP server
- LDAP access with gssapi auth from a client succeeded.

Perhaps George Mamalakis could test the _spnego case?

--=20
John Marshall

--oj4kGyHlBMXGt3Le
Content-Type: application/pgp-signature
Content-Disposition: inline

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.13 (FreeBSD)

iEYEARECAAYFAkrMGy4ACgkQw/tAaKKahKLB2ACgi7xBIOFvUQVZofnu5nz2yXYA
v6IAn161c9k6pT8kCUi6jbWU9u1gQ/HE
=qb3d
-----END PGP SIGNATURE-----

--oj4kGyHlBMXGt3Le--



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20091007043806.GN1086>