**
Ben Lentz wrote:
Greetings list,
I am using openldap-2.4.12 with cyrus-sasl 2.1.22 with mit krb5-1.6.3
on an AIX 5.3, TL8, SP2 machine.
Whenever I try to use GSSAPI with ldapsearch against a Microsoft
Active Directory server, I get the following error:
SASL/GSSAPI authentication started
ldap_sasl_interactive_bind_s: Local error (-2)
When I run the process through truss -rall -wall -f, I see the
following error near the failure:
GSSAPI Error: An invalid name was supplied (Not enough space)
I am able to acquire a kerberos ticket, I can list the GSSAPI plugin
using pluginviewer, and I can ldapsearch against the MSAD server using
simple authentication.
I am yet to be able to get sasl run with gssapi against AD. If you do
make any progress, or if anybody's managed to get it working, please
let us know.
I recompiled against OpenLDAP 2.3.27, cyrus-sasl 2.1.22, and mit
krb5-1.6.1, and am still getting the GSSAPI Error: An invalid name was
supplied (Not enough space) error.
Next, I recompiled the whole shebang against the krb5 from Heimdal and
got the same error.