Heimdal

Dan White dwhite at olp.net
Fri Apr 6 20:55:11 UTC 2007


Does anyone have any intentions of resurrecting the 
libsasl2-modules-gssapi-heimdal module?

I've run into an instance where it would be nice
to have. I'm attempting to use Heimdal's KCM
daemon, by setting KRB5CCNAME to "KCM:SYSTEM":

neelix:/usr/src# export KRB5CCNAME="KCM:SYSTEM"
neelix:/usr/src# klist
Credentials cache: KCM:SYSTEM
         Principal: host/neelix.btcbroadband.com at BTCBROADBAND.COM

   Issued           Expires          Principal
Apr  6 09:44:01  Apr  6 19:44:01  krbtgt/OLP.NET at BTCBROADBAND.COM
neelix:/usr/src#

However, ldapsearch fails:

neelix:/usr/src# ldapsearch -Y GSSAPI
SASL/GSSAPI authentication started
ldap_sasl_interactive_bind_s: Local error (-2)
         additional info: SASL(-1): generic failure: GSSAPI 
Error: Miscellaneous failure (Unknown credential cache type)
neelix:/usr/src#

If I recompile cyrus-sasl2 with the heimdal libraries, I do
not receive the Unknown credential cache type error.

Thanks,
-- 
Dan White
BTC Broadband



More information about the Pkg-cyrus-sasl2-debian-devel mailing list