Re: Kmail/Kaddressbook - LDAP/GSSAPI to Active Directory?

Paul Sobey <[email protected]>
Newsgroups gmane.comp.kde.users.pim
Message-ID <[email protected]>
Bump - is anyone else using ldap directory services against AD here? Would 
appreciate some advice - or is it more appropriate to file a bug?

Cheers,
Paul


On Thu, 18 Jul 2013, Paul Sobey wrote:

> Good Morning,
>
> I use kmail at work. I'd like to bind to our Active Directory (2008) via 
> GSSAPI for addressbook lookup. This used to work, but recently (4.7-4.8?) the 
> LDAP functionality in KDE was refactored a bit, and now I can't make it work. 
> It _does_ work on my home openldap/gssapi setup, making me wonder if there is 
> some sort of schema related issue here.
>
> Steps to reproduce:
>
> - configure ldap AD server with SASL/GSSAPI bindings in kaddressbook/ldap
>  server settings
> - in kmail, compose new email, select recipient, search directory service,
>  type name
> - error message observed: 'LDAP server returned the error: Unknown API
>   error' <LDAP URL>
>
> Details of setup:
>
> - gentoo box/kernel 3.9.1
> - nslcd bound correctly to AD via SASL/GSSAPI (implies stack behaving)
> - kerberos service ticket for ldap/domain controller after search
>  (implying good SASL bind)
> - OpenLDAP 2.4.30
> - KDE 4.10.5
>
> Is anyone out there successfully doing this? I'd love to know if it's a 
> problem with my setup, or bug. Suggestions for further debug gratefully 
> received. In particular, if there is a way to determine exactly what ldap 
> query is being sent to the AD it would help. I can't find a logfile anywhere, 
> and packet capture doesn't help since the traffic is SASL protected.
>
> Cheers,
> Paul
>
> _______________________________________________
> KDE PIM users mailing list
> Subscription management: https://mail.kde.org/mailman/listinfo/kdepim-users
>
_______________________________________________
KDE PIM users mailing list
Subscription management: https://mail.kde.org/mailman/listinfo/kdepim-users
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.