Re: SASL authentication
Rich Megginson <[email protected]>
| Newsgroups | gmane.comp.mozilla.devel.directory |
|---|---|
| Message-ID | <[email protected]> |
Xu, Qiang (FXSGSC) wrote: > Michael wrote: > >> mozldap's ldapsearch obtains a TGT without a kinit invoked >> before? For sure it will obtain a session ticket (ST). But >> does it also something like kinit internally? >> > > Probably mozldap's ldapsearch cannot internally run some command like kinit. I guess Richard means if kinit has been run before ldapsearch, the later will go into Kerberos cache to fetch the ticket automatically, eliminating the need to code manually to fetch the Kerberos ticket when we use SASL APIs to bind to the LDAP server. > > Richard, correct me if I am wrong, please. > You are correct. mozldap ldapsearch will use the TGT acquired with kinit. mozldap ldapsearch will not do a kinit. > Thank you, guys! > Xu Qiang > _______________________________________________ > dev-tech-ldap mailing list > [email protected] > https://lists.mozilla.org/listinfo/dev-tech-ldap > > >