John Robert Mendoza wrote:
Actually i use the
#/usr/lib/mozldap/ldapsearch
There is no option for the -Y.
I can bind using GSSAPI by this command
#/usr/lib/mozldap/ldapsearch -o "mech=GSSAPI" -b "my suffix"
objectclass=*
and it outputs this error
ldapsearch: started Mon Jul 20 16:33:07 2009
ldap_init( localhost, 389 )
Bind Error: Invalid credentials
Bind Error: additional info: SASL(-1): generic failure: GSSAPI Error:
Unspecified GSS failure. Minor code may provide more information
(Permission denied)
Check the permission and ownership of the DS keytab.
rob