Question

Openldap (port636) with SASL configuration needed for Centos7

Posted July 11, 2016 3.1k views
DNS

Hi,

I am trying to setup Openldap server running on port 636 with SASL as authentication mechanism.
OS : Centos7

Can some one provide detailed step by step configurations will be of great help ?

-Rajiv

These answers are provided by our Community. If you find them useful, show some love by clicking the heart. If you run into issues leave a comment, or add your own answer to help others.

×
3 answers

Port 636 is, by DEFAULT, the port for SSL connections in LDAP. Again, the openLDAP documentation is ample on how to configure openLDAP with SASL:
http://www.openldap.org/doc/admin24/sasl.html

This guide should help you get started configuring this stack. If you run into problems with this, share the details of any error messages and what steps you have taken here so we can best help you.

I configured openldap (port636) with SASL configuration in Centos7.

However getting the following error:

[root@LBNILINUX02 ~]# ldapsearch -v
ldapinitialize( <DEFAULT> )
SASL/GSSAPI authentication started
ldap
saslinteractivebind_s: Local error (-2)
additional info: SASL(-1): generic failure: GSSAPI Error: Unspecified GSS failure. Minor code may provide more information (No Kerberos credentials available)
[root@LBNILINUX02 ~]#

kadmin.local cmd shows the correct output.
[root@LBNILINUX02 ~]# kadmin.local
Authenticating as principal root/admin@TEST.COM with password.
kadmin.local: listprincs
K/M@TEST.COM
Manager@TEST.COM
host/LBNILINUX02.test.com@TEST.COM
kadmin/admin@TEST.COM
kadmin/changepw@TEST.COM
kadmin/lbnilinux02.test.com@TEST.COM
kiprop/lbnilinux02.test.com@TEST.COM
krbtgt/TEST.COM@TEST.COM
ldap/LBNILINUX02.test.com@TEST.COM
ldap1@TEST.COM
kadmin.local:

Domain name : test.com

Please help me if anyone has any idea on this.

Submit an Answer