Re: GSSAPI and "encoded packet size too big"

Hugh Cole-Baker <[email protected]>
Newsgroups gmane.comp.security.cyrus.sasl
Message-ID <[email protected]> 
On 22 Mar 2013, at 16:00, [email protected] wrote:

> We are seeing a problem that looks a lot like this yours.  From JNDI
> clients connecting to our OpenLDAP server on Debian Wheezy connections
> are failing.  If the client makes a GSSAPI connection and uses SASL
> encryption then the client will fail with a
> java.lang.NegativeArraySizeException error.

I ran into the same problem with Java interop [1], initially thinking
it was a Java bug, and found a workaround, which is to set minssf to
at least 1 in the sasl-secprops setting in OpenLDAP. This might be
useful - I haven't tried to upgrade to 2.1.26 yet to check if it's
fixed in that version.

Hugh C-B

[1] http://mail.openjdk.java.net/pipermail/security-dev/2013-February/006665.html
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.