GSSAPI Error: An invalid name was supplied (Not enough space)
ben.lentz at gmail.com
Tue Nov 11 21:58:26 EST 2008
> Ben Lentz wrote:
>> Greetings list,
>> I am using openldap-2.4.12 with cyrus-sasl 2.1.22 with mit krb5-1.6.3
>> on an AIX 5.3, TL8, SP2 machine.
>> Whenever I try to use GSSAPI with ldapsearch against a Microsoft
>> Active Directory server, I get the following error:
>> SASL/GSSAPI authentication started
>> ldap_sasl_interactive_bind_s: Local error (-2)
>> When I run the process through truss -rall -wall -f, I see the
>> following error near the failure:
>> GSSAPI Error: An invalid name was supplied (Not enough space)
>> I am able to acquire a kerberos ticket, I can list the GSSAPI plugin
>> using pluginviewer, and I can ldapsearch against the MSAD server using
>> simple authentication.
> I am yet to be able to get sasl run with gssapi against AD. If you do
> make any progress, or if anybody's managed to get it working, please
> let us know.
I recompiled against OpenLDAP 2.3.27, cyrus-sasl 2.1.22, and mit
krb5-1.6.1, and am still getting the GSSAPI Error: An invalid name was
supplied (Not enough space) error.
Next, I recompiled the whole shebang against the krb5 from Heimdal and
got the same error.
More information about the Cyrus-sasl