Hi, On Mon, May 29, 2023 at 12:13 AM Ian Kent <raven@xxxxxxxxxx> wrote: > > On 25/5/23 02:38, Andreas Hasenack wrote: > > I quickly tried this: > > --- a/modules/lookup_ldap.c 2023-05-16 21:02:41.263345786 +0000 > > +++ b/modules/lookup_ldap.c 2023-05-16 21:02:47.807520735 +0000 > > @@ -601,7 +601,10 @@ > > debug(logopt, MODPREFIX "autofs_sasl_bind returned %d", rv); > > #else > > if (ctxt->sasl_mech && !strncmp(ctxt->sasl_mech, "GSSAPI", 6)) { > > - rv = sasl_do_kinit(logopt, ctxt); > > + if (ctxt->client_cc) > > + rv = sasl_do_kinit_ext_cc(logopt, ctxt); > > + else > > + rv = sasl_do_kinit(logopt, ctxt); > > if (rv != 0) > > return 0; > > sasl_flags = LDAP_SASL_QUIET; > > > > And then my test case worked again. But maybe there is another way to > > do it "the openldap way"? > > > On the face of it this looks like a mistake. > > > I'll have a look at the code as a whole later but I expect I'll just apply > > this as it is, ;) \o/ Thanks! :)