Bug#678372: no GSSAPI module for slapd with libsasl2-modules-gssapi-heimdal:amd64

[Dan White]

Hi Timm,

Please provide the following output:

ldd /usr/lib/x86_64-linux-gnu/sasl2/libgssapiv2.so.2.0.25

Do you see any errors listed within /var/log/auth.log when you start slapd?

Is your keytab in any location other than /etc/krb5.keytab? If so, what
method did you use to specify its location?

On 06/21/12 10:27 +0200, Timm Wunderlich wrote:
>Package: libsasl2-modules-gssapi-heimdal:amd64
>Version: 2.1.25.dfsg1-4+b1
>
>With "libsasl2-modules-gssapi-heimdal" i get no GSSAPI module in the 
>supportedSASLMechanisms list from slapd. 
>"libsasl2-modules-gssapi-mit" works fine but i cannot use it since i 
>have a heimdal kdc.

What conflict do you have in this scenario? A package dependency issue or
some problem with the -mit version talking to a heimdal kdc?

>Example:
>
>$ dpkg -l libsasl2-modules-gssapi-heimdal
>ii  libsasl2-modules-gssapi-heimdal:amd64 2.1.25.dfsg1-4+b1              
>Pluggable Authentication Modules for SASL (GSSAPI)
>
>$ ldapsearch -H ldap://127.0.0.1/ -x -b "" -s base -LLL 
>supportedSASLMechanisms
>dn:
>supportedSASLMechanisms: DIGEST-MD5
>supportedSASLMechanisms: CRAM-MD5
>supportedSASLMechanisms: NTLM
>
>
>
>with "libsasl2-modules-gssapi-mit" i get:
>
>$ dpkg -l libsasl2-modules-gssapi-mit
>ii  libsasl2-modules-gssapi-mit:amd64 2.1.25.dfsg1-4+b1              
>Cyrus SASL - pluggable authentication modules (GSSAPI)
>
>$ ldapsearch -H ldap://127.0.0.1/ -x -b "" -s base -LLL 
>supportedSASLMechanisms
>dn:
>supportedSASLMechanisms: SCRAM-SHA-1
>supportedSASLMechanisms: GS2-IAKERB
>supportedSASLMechanisms: GS2-KRB5
>supportedSASLMechanisms: GSSAPI
>supportedSASLMechanisms: DIGEST-MD5
>supportedSASLMechanisms: CRAM-MD5
>supportedSASLMechanisms: NTLM
>
>
>I am using Debian GNU/Linux Wheezy AMD64, kernel 3.2.0-2-amd64, slapd 
>2.4.28-1.1, heimdal kdc 1.6~git20120403+dfsg1-2, all just binaries 
>from Wheezy repo...
>
>Regards,
>Timm Wunderlich

-- 
Dan White