Rajivn
By:
Rajivn

Openldap (port636) with SASL configuration needed for Centos7

July 11, 2016 1.1k views
DNS

Hi,

I am trying to setup Openldap server running on port 636 with SASL as authentication mechanism.
OS : Centos7

Can some one provide detailed step by step configurations will be of great help ?

-Rajiv

3 Answers

This guide should help you get started configuring this stack. If you run into problems with this, share the details of any error messages and what steps you have taken here so we can best help you.

Port 636 is, by DEFAULT, the port for SSL connections in LDAP. Again, the openLDAP documentation is ample on how to configure openLDAP with SASL:
http://www.openldap.org/doc/admin24/sasl.html

I configured openldap (port636) with SASL configuration in Centos7.

However getting the following error:

[root@LBNILINUX02 ~]# ldapsearch -v
ldapinitialize( <DEFAULT> )
SASL/GSSAPI authentication started
ldap
saslinteractivebind_s: Local error (-2)
additional info: SASL(-1): generic failure: GSSAPI Error: Unspecified GSS failure. Minor code may provide more information (No Kerberos credentials available)
[root@LBNILINUX02 ~]#

kadmin.local cmd shows the correct output.
[root@LBNILINUX02 ~]# kadmin.local
Authenticating as principal root/admin@TEST.COM with password.
kadmin.local: listprincs
K/M@TEST.COM
Manager@TEST.COM
host/LBNILINUX02.test.com@TEST.COM
kadmin/admin@TEST.COM
kadmin/changepw@TEST.COM
kadmin/lbnilinux02.test.com@TEST.COM
kiprop/lbnilinux02.test.com@TEST.COM
krbtgt/TEST.COM@TEST.COM
ldap/LBNILINUX02.test.com@TEST.COM
ldap1@TEST.COM
kadmin.local:

Domain name : test.com

Please help me if anyone has any idea on this.

Have another answer? Share your knowledge.