Re: ldapsearch with GSS-SPNEGO

On 2013-04-10 at 17:50 +0800, Cai Fa wrote:
> Hi All,
> I try to do ldapsearch an Active Directory by GSS-SPNEGO.
> > ldapsearch -Y GSS-SPNEGO -LLL -s "base" -b "" supportedSASLMechanisms -h 10.155.60.241 -v

With the host after the attribute request, it won't be parsed as an
option.  So even if everything else is working, you won't be querying
against the correct host.

Move "-h 10.155.60.241 -v" to earlier in the command-line, before
"supportedSASLMechanisms" and you at least will have a syntactically
valid command-line and can then debug what's going wrong with
GSS-SPNEGO.

(I can't add anything to what others have said on that aspect, I don't
 work with AD).

-Phil