ldapsearch with GSS-SPNEGO
Phil Pennock
cyrus-sasl-phil at spodhuis.org
Wed Apr 10 19:11:11 EDT 2013
On 2013-04-10 at 17:50 +0800, Cai Fa wrote:
> Hi All,
> I try to do ldapsearch an Active Directory by GSS-SPNEGO.
> > ldapsearch -Y GSS-SPNEGO -LLL -s "base" -b "" supportedSASLMechanisms -h 10.155.60.241 -v
With the host after the attribute request, it won't be parsed as an
option. So even if everything else is working, you won't be querying
against the correct host.
Move "-h 10.155.60.241 -v" to earlier in the command-line, before
"supportedSASLMechanisms" and you at least will have a syntactically
valid command-line and can then debug what's going wrong with
GSS-SPNEGO.
(I can't add anything to what others have said on that aspect, I don't
work with AD).
-Phil
More information about the Cyrus-sasl
mailing list