RE: SASL authentication

Michael wrote:
> mozldap's ldapsearch obtains a TGT without a kinit invoked
> before? For sure it will obtain a session ticket (ST). But
> does it also something like kinit internally?

Probably mozldap's ldapsearch cannot internally run some command like kinit. I guess Richard means if kinit has been run before ldapsearch, the later will go into Kerberos cache to fetch the ticket automatically, eliminating the need to code manually to fetch the Kerberos ticket when we use SASL APIs to bind to the LDAP server.

Richard, correct me if I am wrong, please.

Thank you, guys!
Xu Qiang