Report this

What is the reason for this report?

Openldap (port636) with SASL configuration needed for Centos7

Posted on July 11, 2016

Hi,

I am trying to setup Openldap server running on port 636 with SASL as authentication mechanism. OS : Centos7

Can some one provide detailed step by step configurations will be of great help ?

-Rajiv



This textbox defaults to using Markdown to format your answer.

You can type !ref in this text area to quickly search our full set of tutorials, documentation & marketplace offerings and insert the link!

These answers are provided by our Community. If you find them useful, show some love by clicking the heart. If you run into issues leave a comment, or add your own answer to help others.

This guide should help you get started configuring this stack. If you run into problems with this, share the details of any error messages and what steps you have taken here so we can best help you.

I configured openldap (port636) with SASL configuration in Centos7.

However getting the following error:

[root@LBNILINUX02 ~]# ldapsearch -v ldap_initialize( <DEFAULT> ) SASL/GSSAPI authentication started ldap_sasl_interactive_bind_s: Local error (-2) additional info: SASL(-1): generic failure: GSSAPI Error: Unspecified GSS failure. Minor code may provide more information (No Kerberos credentials available) [root@LBNILINUX02 ~]#

kadmin.local cmd shows the correct output. [root@LBNILINUX02 ~]# kadmin.local Authenticating as principal root/admin@TEST.COM with password. kadmin.local: listprincs K/M@TEST.COM Manager@TEST.COM host/LBNILINUX02.test.com@TEST.COM kadmin/admin@TEST.COM kadmin/changepw@TEST.COM kadmin/lbnilinux02.test.com@TEST.COM kiprop/lbnilinux02.test.com@TEST.COM krbtgt/TEST.COM@TEST.COM ldap/LBNILINUX02.test.com@TEST.COM ldap1@TEST.COM kadmin.local:

Domain name : test.com

Please help me if anyone has any idea on this.

Port 636 is, by DEFAULT, the port for SSL connections in LDAP. Again, the openLDAP documentation is ample on how to configure openLDAP with SASL: http://www.openldap.org/doc/admin24/sasl.html

The developer cloud

Scale up as you grow — whether you're running one virtual machine or ten thousand.

Get started for free

Sign up and get $200 in credit for your first 60 days with DigitalOcean.*

*This promotional offer applies to new accounts only.