On 2013-04-10 at 17:50 +0800, Cai Fa wrote: > Hi All, > I try to do ldapsearch an Active Directory by GSS-SPNEGO. > > ldapsearch -Y GSS-SPNEGO -LLL -s "base" -b "" supportedSASLMechanisms -h 10.155.60.241 -v With the host after the attribute request, it won't be parsed as an option. So even if everything else is working, you won't be querying against the correct host. Move "-h 10.155.60.241 -v" to earlier in the command-line, before "supportedSASLMechanisms" and you at least will have a syntactically valid command-line and can then debug what's going wrong with GSS-SPNEGO. (I can't add anything to what others have said on that aspect, I don't work with AD). -Phil
