| Subject: | Disabling of SASL security property (SSF) not possible |
| Date: | Sun, 9 Mar 2008 15:43:14 -0000 |
| To: | <bug-perl-ldap [...] rt.cpan.org> |
| From: | "Markus Moeller" <huaraz [...] moeller.plus.com> |
I use Net::LDAP with Authen:SASL as follows
use Net::LDAPS;
use Authen::SASL;
use Authen::Krb5;
....
$ldap = Net::LDAPS->new( $server,
port => 636,
timeout => 2,
verify => 'never',
version => 3) or die "$@";
$sasl = Authen::SASL->new('GSSAPI', 'user' => '');
$mesg = $ldap->bind( '',
sasl => $sasl) ;
$mesg->code && die $mesg->error;
...
and get the error:
00002029: LdapErr: DSID-0C09016D, comment: Cannot start kerberos
signing/sealing when using TLS/SSL, data 0, vece at ./LDAP-AD-query.pl line
82.
Would it be possible to modify Net::LDAPS to set SSF to 0 if SSL or
start_tls is used ?
Thank you
Markus