Question

Openldap (port636) with SASL configuration needed for Centos7

  • Posted July 11, 2016
  • DNS

Hi,

I am trying to setup Openldap server running on port 636 with SASL as authentication mechanism. OS : Centos7

Can some one provide detailed step by step configurations will be of great help ?

-Rajiv

Subscribe
Share

Submit an answer
You can type!ref in this text area to quickly search our full set of tutorials, documentation & marketplace offerings and insert the link!

These answers are provided by our Community. If you find them useful, show some love by clicking the heart. If you run into issues leave a comment, or add your own answer to help others.

I configured openldap (port636) with SASL configuration in Centos7.

However getting the following error:

[root@LBNILINUX02 ~]# ldapsearch -v ldap_initialize( <DEFAULT> ) SASL/GSSAPI authentication started ldap_sasl_interactive_bind_s: Local error (-2) additional info: SASL(-1): generic failure: GSSAPI Error: Unspecified GSS failure. Minor code may provide more information (No Kerberos credentials available) [root@LBNILINUX02 ~]#

kadmin.local cmd shows the correct output. [root@LBNILINUX02 ~]# kadmin.local Authenticating as principal root/admin@TEST.COM with password. kadmin.local: listprincs K/M@TEST.COM Manager@TEST.COM host/LBNILINUX02.test.com@TEST.COM kadmin/admin@TEST.COM kadmin/changepw@TEST.COM kadmin/lbnilinux02.test.com@TEST.COM kiprop/lbnilinux02.test.com@TEST.COM krbtgt/TEST.COM@TEST.COM ldap/LBNILINUX02.test.com@TEST.COM ldap1@TEST.COM kadmin.local:

Domain name : test.com

Please help me if anyone has any idea on this.

Port 636 is, by DEFAULT, the port for SSL connections in LDAP. Again, the openLDAP documentation is ample on how to configure openLDAP with SASL: http://www.openldap.org/doc/admin24/sasl.html

This guide should help you get started configuring this stack. If you run into problems with this, share the details of any error messages and what steps you have taken here so we can best help you.