Kevin:
>
> This looks almost identical to the error that Andreas reported.
I agree.
> I originally had my server listening only on port 389 for ldap and ldaps
Making your server listening for ldaps (ldap with ssl) on port 389 is
kind of not how things should be done (even though its possible in
theory). slapd on port 389 is for tls while slapd on port 636 for ssl.
Two very different ways of doing encrypted ldap-communication.
> I do have a working kerberos system and I have been considering the notion
> of modifying GQ to support SASL binds (in particular GSSAPI), but it looks
> to me like Luma has more working code for SASL and GSSAPI than does GQ (which
> claims to support SASL and GSSAPI but when I queried the mailing list I
> learned
> that this code is broken and the author has no plans to fix it).
A setup with kdc and slapd supporting gssapi/sasl is on the todo-list,
but time is short.
> Anyway, I'm now considering the notion of trying to fix Luma's GSSAPI code.
> Has anyone else mentioned this to you? If not, what would you suggest I do
> to get started (aside from get your sources)? Are all the latest sources
> available through sourceforge CVS? Which module(s)? I would obviously
> need write access to the CVS server to incorporate any changes, but I'm
> nowhere near needing that now. I don't have much experience programming
> in Python, so if you have thoughts on getting up to speed I'd welcome them.
> Feel free to write me off-list on this.
http://sourceforge.net/cvs/?group_id=89105 has the information you need
to get the most current cvs-versions iirc. Let's start with some
patches sent to the list or wido/me privately, and we'll talk about cvs-write
further up on the road.
> Thanks for making Luma. It's a very nice product, and hopefully I can help
> to improve upon it somewhat.
Improvements are welcome. Specially those we don't have resources fixing
ourselves (like sasl/gssapi at the moment). Suggestions on how to make
Luma even better are always welcome.
--
Best regards
Bjørn Ove Grøtan
Debianizing and co-developer of Luma
pgpowcVWztpvi.pgp
Description: PGP signature
|