Platform: SuSE 9.3 x86
I'm having trouble getting kaddressbook (in kontact) to bind to OpenLDAP
via SASL/GSSAPI. I have a valid ticket, but when I try to connect I get
this error popup:
Authorization failed, ldap://server.cise.ufl.edu:389
authentication not supported
This message is sent to syslog:
kio_ldap [kdeinit] kio_ldap ldap
/tmp/ksocket-jfh/klauncherkFTdqc.slave-socket
/tmp/ksocket-jfh/kontact292Sjc.slave-socket:
No worthy mechs found
I have the LDAP addressbook configured as follows:
User : user
BindDN :
Realm : CISE.UFL.EDU
Password :
Host : server.cise.ufl.edu
Port : 389
LDAP Version : 3
Size Limit : default
Time Limit : default
DN : dc=cise,dc=ufl,dc=edu
Filter :
Security : No (no tls)
Authentication : SASL/GSSAPI
A connecton is made to the ldap server and then the error message pops up.
conn=4608 fd=31 ACCEPT from IP=128.227.205.53:60717 (IP=0.0.0.0:389)
conn=4608 op=0 UNBIND
What is odd is that I'm currently using SASL/GSSPI for both IMAP and SMTP
authentication with no problems. I can also using SASL/GSSAPI to bind to
the ldap server using ldapsearch:
/usr/bin/ldapsearch -H ldaps://server.cise.ufl.edu -Y GSSAPI -b
uid=jfh,ou=Users,dc=cise,dc=ufl,dc=edu
SASL/GSSAPI authentication started
SASL username: jfh@xxxxxxxxxxxx
SASL SSF: 56
SASL installing layers
# jfh, Users, cise.ufl.edu
dn: uid=jfh,ou=Users,dc=cise,dc=ufl,dc=edu
I also get a valid ldap ticket this way:
% klist
Credentials cache: FILE:/tmp/krb5cc_987
Principal: jfh@xxxxxxxxxxxx
Issued Expires Principal
May 1 08:36:34 May 1 13:36:34 krbtgt/CISE.UFL.EDU@xxxxxxxxxxxx
May 1 08:37:54 May 1 13:36:34 imap/server.cise.ufl.edu@xxxxxxxxxxxx
May 1 09:36:38 May 1 13:36:34 ldap/server.cise.ufl.edu@xxxxxxxxxxxx
Is this something I'm doing wrong, or perhaps is there something wrong
with the way kio_ldap is compiled on SuSE ?
Thanks,
----------------------------------------------------------------------
| Jim Hranicky, Senior SysAdmin UF/CISE Department |
| E314D CSE Building Phone (352) 392-1499 |
| jfh@xxxxxxxxxxxx http://www.cise.ufl.edu/~jfh |
----------------------------------------------------------------------
___________________________________________________
.
Account management: https://mail.kde.org/mailman/listinfo/kde.
Archives: http://lists.kde.org/.
More info: http://www.kde.org/faq.html.
