Package: heimdal-kdc
Version: 0.7.2.dfsg.1-3
Severity: normal

Hello,

setting up the kdc with ldap backend store causes a connection error
while initializing the realm or trying to query the principals in the
ldap database.

This renders the kerberos system unusable after the upgrade to
etch/testing (or new setup on etch/testing) until this issue is resolved.

AFAICS this happens because the socket file location is changed in
OpenLDAP 2.3. The current release of OpenLDAP 2.3 in etch/testing
creates it's socket file at new default location as
/var/run/slapd/ldapi. The libldap 2.1 libs are looking at
/var/run/ldapi. The kdc is linked against libldap2 version 2.1 while the
daemon is version 2.3.

My current workaround is to change of the default location of socket
file of slapd to /var/run/ldapi in /etc/default/slapd. The cleaner
solution could be to build heimdal-kdc binaries against libldap-2.3
instead of libldap2 package.

Regards,

-Dimitri Puzin aka Tristan-777

Attachment: signature.asc
Description: OpenPGP digital signature

Reply via email to