John Robert Mendoza wrote: > Actually i use the > > #/usr/lib/mozldap/ldapsearch > > There is no option for the -Y. > > I can bind using GSSAPI by this command > > #/usr/lib/mozldap/ldapsearch -o "mech=GSSAPI" -b "my suffix" objectclass=* > > and it outputs this error > > ldapsearch: started Mon Jul 20 16:33:07 2009 > > ldap_init( localhost, 389 ) > Bind Error: Invalid credentials > Bind Error: additional info: SASL(-1): generic failure: GSSAPI Error: > Unspecified GSS failure. Minor code may provide more information > (Permission denied) > Check the permission and ownership of the DS keytab. rob -------------- next part -------------- A non-text attachment was scrubbed... Name: smime.p7s Type: application/x-pkcs7-signature Size: 3245 bytes Desc: S/MIME Cryptographic Signature Url : http://lists.fedoraproject.org/pipermail/389-users/attachments/20090720/ff55e502/attachment.bin