<?xml version="1.0" encoding="UTF-8" ?>

<bugzilla version="5.2"
          urlbase="https://bugzilla.altlinux.org/"
          
          maintainer="jenya@basealt.ru"
>

    <bug>
          <bug_id>35357</bug_id>
          
          <creation_ts>2018-09-06 16:41:32 +0300</creation_ts>
          <short_desc>GSSAPI/Kerberos аутентификация не поддерживается</short_desc>
          <delta_ts>2020-10-30 14:42:42 +0300</delta_ts>
          <reporter_accessible>1</reporter_accessible>
          <cclist_accessible>1</cclist_accessible>
          <classification_id>3</classification_id>
          <classification>Distributions</classification>
          <product>Branch p8</product>
          <component>python-module-ldap3</component>
          <version>не указана</version>
          <rep_platform>all</rep_platform>
          <op_sys>Linux</op_sys>
          <bug_status>CLOSED</bug_status>
          <resolution>WONTFIX</resolution>
          
          
          <bug_file_loc></bug_file_loc>
          <status_whiteboard></status_whiteboard>
          <keywords></keywords>
          <priority>P3</priority>
          <bug_severity>normal</bug_severity>
          <target_milestone>---</target_milestone>
          
          
          <everconfirmed>1</everconfirmed>
          <reporter name="Alexey Sheplyakov">asheplyakov</reporter>
          <assigned_to name="Andrey Cherepanov">cas</assigned_to>
          <cc>lav</cc>
          
          <qa_contact name="qa-p8@altlinux.org">qa-p8</qa_contact>

      

      

      

          <comment_sort_order>oldest_to_newest</comment_sort_order>  
          <long_desc isprivate="0" >
    <commentid>173954</commentid>
    <comment_count>0</comment_count>
      <attachid>7749</attachid>
    <who name="Alexey Sheplyakov">asheplyakov</who>
    <bug_when>2018-09-06 16:41:32 +0300</bug_when>
    <thetext>Created attachment 7749
тестовый скрипт

Действия:

1. Получить TGT (например, kinit administrator@THE.DOMAIN)
2. Присоединиться к LDAP серверу, поддерживающему Kerberos аутентификацию (например, контроллеру Active Directory домена), см. приложенный скрипт

Ожидаемый результат: соединение успешно установлено

Наблюдаемый результат: исключение ldap3.core.exceptions.LDAPSASLMechanismNotSupportedError: requested SASL mechanism not supported</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>193631</commentid>
    <comment_count>1</comment_count>
    <who name="Vitaly Lipatov">lav</who>
    <bug_when>2020-10-30 14:42:42 +0300</bug_when>
    <thetext>На p9:
потребовалось установить
 $ rpm -q python3-module-ldap3 python3-module-gssapi
python3-module-ldap3-2.5.2-alt1.noarch
python3-module-gssapi-1.5.1-alt3.x86_64

Тест молчит:
$ python3 test_ldap3_gssapi.py dc.etersoft.ru

На p8:
$ rpm -q python-module-ldap3 python-module-gssapi
python-module-ldap3-0.9.7.4-alt1.git20150203.1.1
python-module-gssapi-1.2.0-alt0.M80P.1

воспроизводится ошибка LDAPSASLMechanismNotSupportedError

$ grep -r SASL_AVAILABLE_MECHANISMS /usr/lib/python2.7/site-packages/ldap3/
/usr/lib/python2.7/site-packages/ldap3/__init__.py:SASL_AVAILABLE_MECHANISMS = [&apos;EXTERNAL&apos;, &apos;DIGEST-MD5&apos;]

В то время как на p9:
$ grep -A2 -r SASL_AVAILABLE_MECHANISMS /usr/lib/python3/site-packages/ldap3/
/usr/lib/python3/site-packages/ldap3/core/connection.py:SASL_AVAILABLE_MECHANISMS = [EXTERNAL,
/usr/lib/python3/site-packages/ldap3/core/connection.py-                             DIGEST_MD5,
/usr/lib/python3/site-packages/ldap3/core/connection.py-                             GSSAPI,

Задачу закрываю, поскольку p8 не поддерживается.</thetext>
  </long_desc>
      
          <attachment
              isobsolete="0"
              ispatch="0"
              isprivate="0"
          >
            <attachid>7749</attachid>
            <date>2018-09-06 16:41:32 +0300</date>
            <delta_ts>2018-09-06 16:41:32 +0300</delta_ts>
            <desc>тестовый скрипт</desc>
            <filename>test_ldap3_gssapi.py</filename>
            <type>text/plain</type>
            <size>733</size>
            <attacher name="Alexey Sheplyakov">asheplyakov</attacher>
            
              <data encoding="base64">IyEvdXNyL2Jpbi9lbnYgcHl0aG9uMi43CiMgZW5jb2Rpbmc6IHV0Zi04Cgpmcm9tIF9fZnV0dXJl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==
</data>

          </attachment>
      

    </bug>

</bugzilla>