RE: kadmin: kadm5_create_principa: ldap_add_s: Can't contact LDAP server

["Howard Chu" <hyc@highlandsun.com>]

> -----Original Message-----
> From: owner-heimdal-discuss@sics.se
> [mailto:owner-heimdal-discuss@sics.se]On Behalf Of Gémes Géza

> Recent openldap client software wants to auth by sasl by
> default. Please disble it specifying the -x flag.
>
> ldapsearch -H 'ldapi:///' -x

No.

Changing the Bind method will not affect an "Unable to contact the server"
error. Obviously if the client cannot connect, then its choice of Bind method
is irrelevant.

Furthermore, Heimdal's hdb-ldap backend uses SASL/EXTERNAL so you must be
able to verify this method using ldapsearch if you want hdb-ldap to work.

  -- Howard Chu
  Chief Architect, Symas Corp.       Director, Highland Sun
  http://www.symas.com               http://highlandsun.com/hyc
  Symas: Premier OpenSource Development and Support