Uploaded image for project: 'Directory ApacheDS'
  1. Directory ApacheDS
  2. DIRSERVER-1113

LDAP SASL GSSAPI lacks support for different Kerberos encryption types

    XMLWordPrintableJSON

Details

    • Bug
    • Status: Closed
    • Major
    • Resolution: Fixed
    • 1.5.1
    • 1.5.2
    • ldap
    • None

    Description

      The SASL GSSAPI support in ApacheDS' LDAP protocol only supports DES-based Kerberos encryption types.

      The solution is to simply iterate over the keys for the LDAP service principal and add them all to the Subject that is used by jGSS.

      Attachments

        Activity

          People

            enriquer9 Enrique Rodriguez
            enriquer9 Enrique Rodriguez
            Votes:
            0 Vote for this issue
            Watchers:
            0 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved: