Re: LDAP authentication via GSSAPI

Hello,
   thank you for the answer.

> I suppose the best way on Windows is
>
> 1. to make use un the windows native GSSAPI-interface (called 'SSPI'), as
> Win32::IntAuth does,
>
> 2. and wrap a Authen::SASL adapter around it so Net::LDAP can make use of it.
>
> Sorry I did not do this task in the past.

Does this mean that currently - using a native ActiveState Perl 
installation and only ActiveState PPMs - there is no way to get this 
working?
   Or can I do this "use SSPI and wrap a Authen::SASL adapter around it" 
within my Perl script?

I guess not ...

The problem is that I have several Perl scripts that have to run on a 
Windows server regularly via Windows Task Scheduler. The guys in the 
operating want that the scripts are running under an existing Windows 
account.
They don't allow me to put a LDAP password in cleartext into a config file.

Regards,  Jochen.

Am 18.02.2015 um 21:55 schrieb Achim Grolms:
> On Wednesday 18 February 2015, Jochen Keutel wrote:
>
>> The reason is probably that line 10 contains "use GSSAPI;".
>>
>> According to http://code.activestate.com/ppm/GSSAPI/ : GSSAPI couldn't
>> be compiled for Windows.
> Yes and No.
>
> Yes, it can be compiled on Windows linking against a GSSAPI implementation on
> Windows, for example MIT Kerberos. In GSSAPI sourcetree run
>
> perl Makefile.PL --help
>
> to get configuration-help.
> In that case you additionally must configure your krb5.conf file with the KDC
> you use and run 'ktpass' to get a TGT.
>
> No, because GSSAPI implementation like MIT Kerberos must be installed as a
> prerequierement on the Windows machine, Active State has a problem how to
> build and ship this module with ppm.
>
>> http://www.perlmonks.org/?node_id=851947 describes the same problem but
>> doesn't offer a solution.
>>
>> Is there a solution? Is there another way (e.g. another module than
>> Authen::SASL) to get this working?
> I suppose the best way on Windows is
>
> 1. to make use un the windows native GSSAPI-interface (called 'SSPI'), as
> Win32::IntAuth does,
>
> 2. and wrap a Authen::SASL adapter around it so Net::LDAP can make use of it.
>
> Sorry I did not do this task in the past.
>
> Best Regards,
> Achim