Hello Thomas,

2011/1/21 Thomas Schweikle <[email protected]>

> Hi!
>
> I kerberized ldap:
>

Maybe you missed "olcAuthzPolicy"


client:~$ ldapsearch -H ldap://srv.example.com
> SASL/DIGEST-MD5 authentication started
>

Is not using GSSAPI.

Does your slapd have a kerberos principal (ldap/[email protected])
?

Did you tell slapd where its kerberos keytab file is
(export KRB5_KTNAME=/path/to/keytab)?

Regards,
Norberto

Reply via email to