diff options
| author | Timothy Pearson <kb9vqf@pearsoncomputing.net> | 2025-09-30 01:44:32 -0500 |
|---|---|---|
| committer | Timothy Pearson <tpearson@raptorengineering.com> | 2025-10-22 19:33:43 -0500 |
| commit | 755f944e806bc672a09163c77cbed2f7b89126e5 (patch) | |
| tree | fdfb4eef4fe4655634d628e6b0afc022f5e7495d | |
| parent | 1f2f8b97b27b2906c0c96d2891ba7657093715d3 (diff) | |
| download | kcmldapcontroller-755f944e.tar.gz kcmldapcontroller-755f944e.zip | |
Only enable supported SASL mechanisms
Without this, OpenLDAP will try to use SASL/SPNEGO instead of GSSAPI, which will fail on Heimdal servers
Signed-off-by: Timothy Pearson <kb9vqf@pearsoncomputing.net>
| -rw-r--r-- | confskel/sasl/slapd.conf | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/confskel/sasl/slapd.conf b/confskel/sasl/slapd.conf index ef2884d..299294a 100644 --- a/confskel/sasl/slapd.conf +++ b/confskel/sasl/slapd.conf @@ -1,5 +1,5 @@ #mech_list: GSSAPI EXTERNAL -#mech_list: PLAIN LOGIN GSSAPI EXTERNAL +mech_list: PLAIN LOGIN GSSAPI EXTERNAL keytab: @@@LDAP_KEYTAB_FILE@@@ pwcheck_method: saslauthd saslauthd_path: /var/run/saslauthd/mux |