Question

Openldap (port636) with SASL configuration needed for Centos7

Hi,

I am trying to setup Openldap server running on port 636 with SASL as authentication mechanism. OS : Centos7

Can some one provide detailed step by step configurations will be of great help ?

-Rajiv


Submit an answer

This textbox defaults to using Markdown to format your answer.

You can type !ref in this text area to quickly search our full set of tutorials, documentation & marketplace offerings and insert the link!

Sign In or Sign Up to Answer

These answers are provided by our Community. If you find them useful, show some love by clicking the heart. If you run into issues leave a comment, or add your own answer to help others.

Want to learn more? Join the DigitalOcean Community!

Join our DigitalOcean community of over a million developers for free! Get help and share knowledge in Q&A, subscribe to topics of interest, and get courses and tools that will help you grow as a developer and scale your project or business.

I configured openldap (port636) with SASL configuration in Centos7.

However getting the following error:

[root@LBNILINUX02 ~]# ldapsearch -v ldap_initialize( <DEFAULT> ) SASL/GSSAPI authentication started ldap_sasl_interactive_bind_s: Local error (-2) additional info: SASL(-1): generic failure: GSSAPI Error: Unspecified GSS failure. Minor code may provide more information (No Kerberos credentials available) [root@LBNILINUX02 ~]#

kadmin.local cmd shows the correct output. [root@LBNILINUX02 ~]# kadmin.local Authenticating as principal root/admin@TEST.COM with password. kadmin.local: listprincs K/M@TEST.COM Manager@TEST.COM host/LBNILINUX02.test.com@TEST.COM kadmin/admin@TEST.COM kadmin/changepw@TEST.COM kadmin/lbnilinux02.test.com@TEST.COM kiprop/lbnilinux02.test.com@TEST.COM krbtgt/TEST.COM@TEST.COM ldap/LBNILINUX02.test.com@TEST.COM ldap1@TEST.COM kadmin.local:

Domain name : test.com

Please help me if anyone has any idea on this.

Port 636 is, by DEFAULT, the port for SSL connections in LDAP. Again, the openLDAP documentation is ample on how to configure openLDAP with SASL: http://www.openldap.org/doc/admin24/sasl.html

This guide should help you get started configuring this stack. If you run into problems with this, share the details of any error messages and what steps you have taken here so we can best help you.