diff options
| author | Timothy Pearson <kb9vqf@pearsoncomputing.net> | 2025-09-30 01:44:32 -0500 |
|---|---|---|
| committer | Timothy Pearson <kb9vqf@pearsoncomputing.net> | 2025-10-05 14:48:32 -0500 |
| commit | 132d640313f7efd26b6df6424446e1af9d4f54aa (patch) | |
| tree | 35ded4ad834f4f0b7cd3caaf950eacce7d10a945 | |
| parent | dfdfa69d74d44b625100e08dbdaab52ef854efb3 (diff) | |
| download | kcmldapcontroller-132d640313f7efd26b6df6424446e1af9d4f54aa.tar.gz kcmldapcontroller-132d640313f7efd26b6df6424446e1af9d4f54aa.zip | |
Only enable supported SASL mechanisms
Without this, OpenLDAP will try to use SASL/SPNEGO instead of GSSAPI, which will fail on Heimdal servers
Signed-off-by: Timothy Pearson <kb9vqf@pearsoncomputing.net>
| -rw-r--r-- | confskel/sasl/slapd.conf | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/confskel/sasl/slapd.conf b/confskel/sasl/slapd.conf index ef2884d..299294a 100644 --- a/confskel/sasl/slapd.conf +++ b/confskel/sasl/slapd.conf @@ -1,5 +1,5 @@ #mech_list: GSSAPI EXTERNAL -#mech_list: PLAIN LOGIN GSSAPI EXTERNAL +mech_list: PLAIN LOGIN GSSAPI EXTERNAL keytab: @@@LDAP_KEYTAB_FILE@@@ pwcheck_method: saslauthd saslauthd_path: /var/run/saslauthd/mux |