Unable to run SASL using GSSAPI/kerberos 5 as authentication agai nst Sun One Directory Server

From: Vikas Gandhi (VGandhi at quark dot co dot in)
Date: Mon Mar 01 2004 - 09:57:47 EST

  • Next message: Gary Mills: "sasl_auxprop_plugin appears to be ignored"

    I am tring to run the same example that Microsoft has given for
    authentication. I am tring this sample against SEAM and not AD.
    FYI: I am able to run gssapi samples successfully. Also
    /var/Sun/mps/shared/bin/ldapsearch -o mech=GSSAPI -h blade -p 389 -o
    realm="quark.co.in" -o authzid="test at QUARK dot CO dot IN" -b
    "ou=people,dc=quark,dc=co,dc=in" objectclass=*
    runs well So I know that I do not have installing probs.

    Though I am abl to get the ticket still error.txt(attaches is the output)

    $klist
    Ticket cache: /tmp/krb5cc_1023
    Default principal: test at QUARK dot CO dot IN

    Valid starting Expires Service
    principal
    Fri Feb 27 20:22:14 2004 Sat Feb 28 04:22:14 2004
    krbtgt/QUARK dot CO dot IN at QUARK dot CO dot IN
    Fri Feb 27 20:26:52 2004 Sat Feb 28 04:22:14 2004
    ldap/blade dot quark dot co dot in at QUARK dot CO dot IN

    Any small hint shall also be of great use.
    ---------------------------Output at full log
    traceLevel-----------------------------
    ldap_open
    ldap_init
    nsldapi_open_ldap_connection
    nsldapi_connect_to_host: blade:389
    sd 4 connected to: 10.91.198.100
    ldap_open successful, ld_host is (null)
    LDAP service name: ldap at blade
    ==> client_establish_context
    Sending init_sec_context token (size=466)...
    60 82 01 ce 06 09 2a 86 48 86 f7 12 01 02 02 01
    00 6e 82 01 bd 30 82 01 b9 a0 03 02 01 05 a1 03
    02 01 0e a2 07 03 05 00 20 00 00 00 a3 82 01 01
    61 81 fe 30 81 fb a0 03 02 01 05 a1 0d 1b 0b 51
    55 41 52 4b 2e 43 4f 2e 49 4e a2 24 30 22 a0 03
    02 01 03 a1 1b 30 19 1b 04 6c 64 61 70 1b 11 62
    6c 61 64 65 2e 71 75 61 72 6b 2e 63 6f 2e 69 6e
    a3 81 be 30 81 bb a0 03 02 01 01 a2 81 b3 04 81
    b0 a9 d9 b3 6e 42 77 5e a8 82 7b a5 16 98 79 0c
    1e a3 70 00 45 f2 d4 cc 23 9d ef ca d5 ea 7a 12
    f2 42 a8 44 a1 6a a0 b0 c1 37 b8 68 fa 6f 22 f1
    a3 79 ce 4c db c4 b9 02 b6 04 10 f5 ec 22 03 c9
    55 53 6b 4d e3 f9 d5 0e 7a 43 7a 40 35 95 4f 33
    74 9c 82 c3 29 36 cf 7c 04 1d ab b7 c6 9e 43 f0
    78 0c 9f d1 49 bf ec c9 83 45 34 a9 e6 df 99 56
    c0 06 04 36 bc f3 f1 bd f1 f8 30 0b 12 01 0a d4
    e9 da 84 e7 71 3a d5 7c 90 02 64 eb 74 96 d3 5d
    69 b5 0c 5e 20 02 32 cc 34 e9 06 0e 18 9f 16 00
    bd bf b3 9f f7 59 3c 3f 5f bc d7 4a e5 32 8f 51
    98 a4 81 9e 30 81 9b a0 03 02 01 01 a2 81 93 04
    81 90 81 1c 61 cf 45 b3 8e 8b b7 a1 b8 2e 1f da
    ef b8 c0 be 9c 60 3a e3 08 43 52 37 2a 99 02 9d
    50 05 61 1b 04 4a 17 2d 89 da 12 11 3d 1e 93 f1
    d8 64 eb b0 7f 0e 5d 34 c5 35 92 6d aa fc 80 bd
    1d a8 e3 40 1b 17 8c 63 d2 12 b9 1c 51 84 7c 9e
    f2 d7 9b 7f 39 bb 3e e8 37 6c cd 01 86 92 3c 02
    fb 04 18 58 81 c5 4d 3d d2 ae 22 d4 c4 c2 39 ba
    dd 6f ac c0 46 a9 25 c6 5f cb e2 77 a2 82 d8 e4
    f1 5e 7f ca 75 3a 5e 41 72 d4 cc d4 6a 32 ef 17
    cd e0
    ==> send_token
    ldap_sasl_bind
    nsldapi_send_initial_request
    nsldapi_send_server_request
    <== send_token
    continue needed...
    ==> recv_token
    ldap_result
    nsldapi_result_nolock
    wait4msg (infinite timeout)
    ** Connections:
    * host: blade port: 389 secure: No (default)
      refcnt: 2 status: Connected
      last used: Mon Mar 1 13:47:58 2004

    ** Outstanding Requests:
     * msgid 1, origid 1, status InProgress
       outstanding referrals 0, parent count 0
       pending bind DN: <uid=test,ou=people,dc=quark,dc=co,dc=in>
    ** Response Queue:
       Empty
    nsldapi_do_ldap_select
    read1msg
    got RESULT msgid 1, original id 1
    check_for_refs
    check_for_refs: new result: msgid 1, res_errno 14, res_error <>,
    res_matched <>
    check_for_refs: 0 new refs(s); chasing 0 of them
    request 1 done
    res_errno: 14, res_error: <>, res_matched: <>
    nsldapi_free_request (origid 1, msgid 1)
    nsldapi_free_connection
    nsldapi_free_connection: refcnt 1
    ldap_parse_sasl_bind_result
    ldap_msgfree
    <== recv_token
    <== recv_token
    Received token (size=106)...
    60 68 06 09 2a 86 48 86 f7 12 01 02 02 02 00 6f
    59 30 57 a0 03 02 01 05 a1 03 02 01 0f a2 4b 30
    49 a0 03 02 01 01 a2 42 04 40 89 2a a0 b6 b6 65
    98 f1 79 2f 8a 9d ce 92 cc 32 12 86 d9 2a 73 49
    02 12 17 0e 41 88 5e c0 09 78 19 c2 b6 00 93 b6
    16 35 33 43 7e 81 4f ec d2 9d 99 e0 c1 5c 5b ee
    1c 13 88 46 7a 09 dd 92 30 ea
    Sending init_sec_context token (size=0)...

    ==> send_token
    ldap_sasl_bind
    nsldapi_send_initial_request
    nsldapi_send_server_request
    <== send_token
    <== client_establish_context
    ==> negotiate_security_options
    ==> recv_token
    ldap_result
    nsldapi_result_nolock
    wait4msg (infinite timeout)
    ** Connections:
    * host: blade port: 389 secure: No (default)
      refcnt: 2 status: Connected
      last used: Mon Mar 1 13:47:58 2004

    ** Outstanding Requests:
     * msgid 2, origid 2, status InProgress
       outstanding referrals 0, parent count 0
       pending bind DN: <uid=test,ou=people,dc=quark,dc=co,dc=in>
    ** Response Queue:
       Empty
    nsldapi_do_ldap_select
    read1msg
    got RESULT msgid 2, original id 2
    check_for_refs
    check_for_refs: new result: msgid 2, res_errno 14, res_error <>,
    res_matched <>
    check_for_refs: 0 new refs(s); chasing 0 of them
    request 2 done
    res_errno: 14, res_error: <>, res_matched: <>
    nsldapi_free_request (origid 2, msgid 2)
    nsldapi_free_connection
    nsldapi_free_connection: refcnt 1
    ldap_parse_sasl_bind_result
    ldap_msgfree
    <== recv_token
    <== recv_token
    Received token (size=53)...
    60 33 06 09 2a 86 48 86 f7 12 01 02 02 02 01 00
    00 ff ff ff ff bf c6 cc 61 b8 48 2f 1e 6f 44 28
    77 d6 81 34 3f 24 26 0c 24 1d a6 6e 31 01 00 ff
    ff 04 04 04 04
    Received security token level 1 size 65535
    Sending security token level 1 size 65535
    ==> send_token
    ldap_sasl_bind
    nsldapi_send_initial_request
    nsldapi_send_server_request
    <== send_token
    ==> parse_bind_result
    ldap_result
    nsldapi_result_nolock
    wait4msg (infinite timeout)
    ** Connections:
    * host: blade port: 389 secure: No (default)
      refcnt: 2 status: Connected
      last used: Mon Mar 1 13:47:58 2004

    ** Outstanding Requests:
     * msgid 3, origid 3, status InProgress
       outstanding referrals 0, parent count 0
       pending bind DN: <uid=test,ou=people,dc=quark,dc=co,dc=in>
    ** Response Queue:
       Empty
    nsldapi_do_ldap_select
    read1msg
    got RESULT msgid 3, original id 3
    check_for_refs
    check_for_refs: new result: msgid 3, res_errno 49, res_error <SASL(-1):
    generic failure: >, res_matched <>
    check_for_refs: 0 new refs(s); chasing 0 of them
    request 3 done
    res_errno: 49, res_error: <SASL(-1): generic failure: >, res_matched: <>
    nsldapi_free_request (origid 3, msgid 3)
    nsldapi_free_connection
    nsldapi_free_connection: refcnt 1
    ldap_first_message
    ldap_first_message::LDAP_RES_BIND
    ldap_msgfree
    <== parse_bind_result
    rc !=0 after parse_bind_result
    <== negotiate_security_options
    after negotiate_security_options -1
     after ldap_gssapi_bind
    an error occurred in ldap_gssapi_bind
    ldap_perror
    ldap_gssapi_bind: Requested LDAP control not found
    ldap_unbind
    nsldapi_free_connection
    nsldapi_send_unbind
    nsldapi_free_connection: actually freed


  • Next message: Gary Mills: "sasl_auxprop_plugin appears to be ignored"





    Hosted Email Solutions

    Invaluement Anti-Spam DNSBLs



    Powered By FreeBSD   Powered By FreeBSD