GSSAPI Error: An invalid name was supplied (Not enough space)

Ben Lentz ben.lentz at gmail.com
Tue Nov 11 21:58:26 EST 2008


**
> Ben Lentz wrote:
>> Greetings list,
>> I am using openldap-2.4.12 with cyrus-sasl 2.1.22 with mit krb5-1.6.3
>> on an AIX 5.3, TL8, SP2 machine.
>>
>> Whenever I try to use GSSAPI with ldapsearch against a Microsoft
>> Active Directory server, I get the following error:
>>
>> SASL/GSSAPI authentication started
>> ldap_sasl_interactive_bind_s: Local error (-2)
>>
>> When I run the process through truss -rall -wall -f, I see the
>> following error near the failure:
>> GSSAPI Error: An invalid name was supplied (Not enough space)
>>
>> I am able to acquire a kerberos ticket, I can list the GSSAPI plugin
>> using pluginviewer, and I can ldapsearch against the MSAD server using
>> simple authentication.
>
> I am yet to be able to get sasl run with gssapi against AD. If you do 
> make any progress, or if anybody's managed to get it working, please 
> let us know.

I recompiled against OpenLDAP 2.3.27, cyrus-sasl 2.1.22, and mit 
krb5-1.6.1, and am still getting the GSSAPI Error: An invalid name was 
supplied (Not enough space) error.

Next, I recompiled the whole shebang against the krb5 from Heimdal and 
got the same error.


More information about the Cyrus-sasl mailing list