Re: sasl/gssapi issue

[Robert Viduya <robert@xxxxxxxxxxxxxx>]

This isn't a client issue, this is a server issue.  The server is allowing me to bind to one user using another user's credentials.  It's the server's responsibility to verify proper credentials on bind requests.

On Mar 6, 2014, at 6:17 PM, Paul Robert Marino <prmarino1@xxxxxxxxx> wrote:

This is an issue with the LDAP search command which is part of the openldap project not 389 server.
That said I think it ignores the -X if you only have one cached credential and are using it in combination with the -Y GSSAPI option further more if you want it to prompt you for a password you need to add a -W

--
389 users mailing list
389-users@xxxxxxxxxxxxxxxxxxxxxxx
https://admin.fedoraproject.org/mailman/listinfo/389-users