ldap_sasl_bind - GSSAPI for NTLM authentication

Question

Does ldap_sasl_bind_s support NTLM authentication via GSSAPI? It seems that this is variable to the underlying implementation (GSSAPI for NTLM authentication). I am trying to use NTLM authentication to an Active Directory server.

Answer 1

As the method call says: this is SASL's problem. You have to specify the SASL mechanism. The GSSAPI mechanism is Kerberos 5. Some GSS-APIs like Heimdal do support NTLM but your SASL impl has to do that too, I guess. I do not think that Cyrus SASL does that. It's best to rely on GSS-API with Kerberos only. This work here from a C SASL bind and a Java SASL bind.