Red Hat DIRECTORY SERVER 7.1 SP7 - S Guia de Resolução de Problemas descarregar pdf (Página 109)

SASL-GSSAPI 109

SASL-GSSAPI

This section discusses the error messages logged by the SASL-GSSAPI authentication mechanism.

 Section 22.1, “SASL-GSSAPI Issues,” on page 109

 Section 22.2, “Log File,” on page 109

 Section 22.3, “Error Messages,” on page 109

22.1 SASL-GSSAPI Issues

 Section 22.1.1, “Issue with Multiple User Objects,” on page 109

 Section 22.1.2, “Authorization ID,” on page 109

22.1.1 Issue with Multiple User Objects

LDAP bind with SASL GSSAPI fails if the same Kerberos principal is associated with multiple

eDirectory user objects.

22.1.2 Authorization ID

RFC2222 specifies support for an authorization ID sent by the user and client. This is not supported

by the SASL GSSAPI method.

22.2 Log File

Error messages are logged in the

ndsd.log

file in Linux or UNIX installations.

22.3 Error Messages

SASL-GSSAPI: Reading Object user_FDN FAILED eDirectory error code

Cause: This error is generated in eDirectory. The

user_FDN

object does not exist.

SASL-GSSAPI: Reading principal names for user_FDN failed eDirectory error

code

Cause: This error is generated in eDirectory. The Kerberos principal name is not attached to the user

object (

userdn

1 2 ... 104 105 106 107 108 109 110 111 112 113 114 ... 119 120

Sem comentários

Red Hat DIRECTORY SERVER 7.1 SP7 - S Guia de Resolução de Problemas Página 109