[jira] Resolved: (DIRSERVER-1113) LDAP SASL GSSAPI lacks support for different Kerberos encryption types

["Enrique Rodriguez (JIRA)" <ji...@apache.org>]

     [ https://issues.apache.org/jira/browse/DIRSERVER-1113?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Enrique Rodriguez resolved DIRSERVER-1113.
------------------------------------------

    Resolution: Fixed

Added support to LDAP SASL GSSAPI for different Kerberos encryption types (DIRSERVER-1113):
o  Call to retrieve Subject now iterates over all keys returned for the LDAP service principal and adds the keys to the private credentials.

Committed to protocol-ldap module in 'bigbang' branch on revision 605767.

http://svn.apache.org/viewcvs.cgi?view=rev&rev=605767


> LDAP SASL GSSAPI lacks support for different Kerberos encryption types
> ----------------------------------------------------------------------
>
>                 Key: DIRSERVER-1113
>                 URL: https://issues.apache.org/jira/browse/DIRSERVER-1113
>             Project: Directory ApacheDS
>          Issue Type: Bug
>          Components: ldap
>    Affects Versions: 1.5.1
>            Reporter: Enrique Rodriguez
>            Assignee: Enrique Rodriguez
>             Fix For: 1.5.2
>
>
> The SASL GSSAPI support in ApacheDS' LDAP protocol only supports DES-based Kerberos encryption types.
> The solution is to simply iterate over the keys for the LDAP service principal and add them all to the Subject that is used by jGSS.

-- 
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.