Bug 163362 - sys-auth/nss_ldap and openldap + sasl + gssapi
Bug#: 163362 Product:  Gentoo Linux Version: unspecified Platform: All
OS/Version: Linux Status: RESOLVED Severity: enhancement Priority: P2
Resolution: FIXED Assigned To: robbat2@gentoo.org Reported By: lkml_ccc@yahoo.it
Component: Ebuilds
URL: 
Summary: sys-auth/nss_ldap and openldap + sasl + gssapi
Keywords:  
Status Whiteboard: 
Opened: 2007-01-22 22:56 0000
Description:   Opened: 2007-01-22 22:56 0000
The current ebuild does not set the configure variable required to bind to
openldap via gssapi. 
Instead of binding using the configured (in ldap.conf) principal, it binds as
anonymous. This break a configuration where simple bind is not allowed to
openldap.

Reproducible: Always

Steps to Reproduce:
1.Use a configuration similar to this (look at last 5 options in ldap.conf)
http://www.nabble.com/Re:-nss_ldap-using-sasl-with-gssapi.-Kerberos-credentials-cache%09problem-Scanned--t2270116.html
2.
3.

Actual Results:  
Sasl bind does not work (as it does not use/find cache credentials)

Expected Results:  
It should use the configured cache credentials.

------- Comment #1 From lkml_ccc@yahoo.it 2007-01-22 22:58:26 0000 -------
Created an attachment (id=107851) [details]
My modified ebuild

This ebuild works for me.

------- Comment #2 From Robin Johnson 2007-01-31 02:33:56 0000 -------
fixed in cvs.