GSSAPI SASL Kerberos authentication

Question

I have Sun one Directory Server 5.2 P4 installed on Solars -Sparc system.
For GSSAPI SASL Kerberos authentication to work, do I need to install a third party GSSAPI plugin(like PADL's) or is it enough to use the GSSAPI plugin that comes with Sune One bundle ?
I got this doubt after going through the following link
http://lists.fini.net/pipermail/ldap-interop/2005-March/000342.html .. Please clarify

Answer 1

Hi Ludovic,
I have fixed the Kerberos issue..I am getting following messages from the access logs on the server while doing ldapsearch
tail -f /var/Sun/mps/slapd-bf1r-dsun-1/logs/access
[20/Feb/2007:05:53:35 -0700] conn=21 op=0 msgId=1 - RESULT err=49 tag=97 nentries=0 etime=0
[20/Feb/2007:05:53:35 -0700] conn=21 op=1 msgId=2 - UNBIND
[20/Feb/2007:05:53:35 -0700] conn=21 op=1 msgId=-1 - closing - U1
[20/Feb/2007:05:53:36 -0700] conn=21 op=-1 msgId=-1 - closed.
[20/Feb/2007:05:56:18 -0700] conn=22 op=-1 msgId=-1 - fd=26 slot=26 LDAP connection from 10.7.30.185 to 10.7.30.16
[20/Feb/2007:05:56:18 -0700] conn=22 op=0 msgId=1 - BIND dn="uid=tester1,ou=people,dc=test1,dc=com" method=sasl version=3 mech=GSSAPI
[20/Feb/2007:05:56:18 -0700] conn=22 op=0 msgId=1 - RESULT err=49 tag=97 nentries=0 etime=0
from ethereal i am getting the following message
----- Lightweight Directory Access Protocol Header -----
LDAP: SASL(-13): authentication failur
LDAP: e: GSSAPI Error: Unspecified GSS
LDAP: failure. Minor code may provid
LDAP: e more information (No error)
My rootdse looks liks this for gssapi
dn: cn=default,cn=GSSAPI,cn=identity mapping,cn=config
objectClass: dsIdentityMapping
objectClass: nsContainer
objectClass: dsPatternMatching
objectClass: top
cn: default
dsMatching-pattern: ${Principal}
dsSearchBaseDN: ou=people,dc=cisco,dc=com
creatorsName: cn=directory manager
createTimestamp: 20070220045812Z
dsMappedDN: uid=$1,ou=people,dc=test1,dc=com
dsMatching-regexp: (.*)@(.*)
modifiersName: uid=admin,ou=administrators,ou=topologymanagement,o=netscaperoo
t
modifyTimestamp: 20070220102553Z
Please help on this.
Thanks,
Radhakrishnan