r13342: Make the GSSAPI SASL mech actually work, by (shock horror) reading the spec.
authorAndrew Bartlett <abartlet@samba.org>
Sat, 4 Feb 2006 09:53:50 +0000 (09:53 +0000)
committerGerald (Jerry) Carter <jerry@samba.org>
Wed, 10 Oct 2007 18:51:46 +0000 (13:51 -0500)
commit3e462897754b30306c1983af2d137329dd937ad6
tree965220df381dc687695ba28b4599392094fbb4f6
parentb986278b367a6693f69a06e07ca90f8b5a23a0c0
r13342: Make the GSSAPI SASL mech actually work, by (shock horror) reading the spec.

GSSAPI differs from GSS-SPNEGO in an additional 3 packets, negotiating
a buffer size and what integrity protection/privacy should be used.

I worked off draft-ietf-sasl-gssapi-03, and this works against Win2k3.

I'm doing this in the hope that Apple clients as well as SASL-based
LDAP tools may get a bit further.

I still can't get ldapsearch to work, it fails with the ever-helpful
'Local error'.

Andrew Bartlett
source/auth/gensec/gensec.c
source/auth/gensec/gensec_gssapi.c
source/libcli/ldap/ldap_bind.c