Re: SASL authentication

> Finally, I did a combination of SSL + SASL:
>
>qxu@durian(pts/1):/[44]$ ldapsearch -Y GSSAPI -H 
>'ldaps://13.198.98.35:636' -b 'dc=sesswin2003,dc=com' -s sub -LLL 'cn=qxu' 
>mail
> SASL/GSSAPI authentication started
> ldap_sasl_interactive_bind_s: Inappropriate authentication (48)
>        additional info: 00002029: LdapErr: DSID-0C09016D, comment: Cannot 
> start kerberos signing/sealing when using TLS/SSL, data 0, vece
> ==============================================
> The error is the same as when I use MozLDAP.
>

Try to add an option -o secprop="maxssf=0" or similar.

>
> So, can I say SASL can't work together with SSL?
>
> Thanks,
> Xu Qiang=

Markus