[Pkg-openldap-devel] Bug#608815: Proxy authorization fails with SASL-GSSAPI

[Jaap Winius]

Package: slapd
Version: 2.4.23-7

Proxy authorization works with SIMPLE binds, as well as with SASL  
binds using various other mechanisms, but not with SASL and GSSAPI. In  
that case it may only work initially, but eventually the problem is  
that, for no apparent reason, the consumer instead attempts to use a  
SIMPLE bind to authenticate itself to the provider. Naturally, this  
fails.

For detailed background and debugging info, see this thread:

    http://www.openldap.org/lists/openldap-technical/201101/msg00002.html

And especially this message:

    http://www.openldap.org/lists/openldap-technical/201101/msg00009.html