Actually i use the

#/usr/lib/mozldap/ldapsearch

There is no option for the -Y.

I can bind using GSSAPI by this command

#/usr/lib/mozldap/ldapsearch -o "mech=GSSAPI" -b "my suffix" objectclass=*

and it outputs this error

ldapsearch: started Mon Jul 20 16:33:07 2009

ldap_init( localhost, 389 )
Bind Error: Invalid credentials
Bind Error: additional info: SASL(-1): generic failure: GSSAPI Error: Unspecified GSS failure.  Minor code may provide more information (Permission denied)

Thanks for your reply.




John Robert Mendoza

--- On Mon, 7/20/09, Andrey Ivanov <andrey.ivanov@polytechnique.fr> wrote:

From: Andrey Ivanov <andrey.ivanov@polytechnique.fr>
Subject: Re: [389-users] MIT Kerberos and FDS integration
To: "General discussion list for the 389 Directory server project." <fedora-directory-users@redhat.com>
Date: Monday, 20 July, 2009, 2:06 PM

Hi,


kinit myusername
ldapsearch -Y GSSAPI -h ldap.example.com -b "<your suffix>" objectClass=*
SASL/GSSAPI authentication started
SASL username: <myusername>@KERBEROS.REALM
SASL SSF: 56
SASL installing layers
# extended LDIF
#
# LDAPv3
# base <your suffix> with scope subtree
# filter:  objectClass=*
# requesting: ALL
#
...



2009/7/20 John Robert Mendoza <jrobertm8@yahoo.com>:
> Hi to all!
>
> I am currently setting up an integration with the FDS and Kerberos.
>
> I have successfully setup both independently and verified them to be working
> independently.
>
> How do I know that I have successfully binded FDS and kerberos.
> How can i verify it.
>
> I am using Fedora 1.2.0 and Kerberos 1.6.3...
>
>
> John Robert Mendoza
> ________________________________
> What can we do to improve Metro Manila traffic?
> Find the answers on Yahoo! Answers
> --
> 389 users mailing list
> 389-users@redhat.com
> https://www.redhat.com/mailman/listinfo/fedora-directory-users
>
>

--
389 users mailing list
389-users@redhat.com
https://www.redhat.com/mailman/listinfo/fedora-directory-users


Importing contacts has never been easier..
Bring your friends over to Yahoo! Mail today!