Does the Samba 4 LDAP server support GSS-SPNEGO over SASL

[Krishna Ganugapati]

We're writing some client side ldap code which is trying to do a SASL
bind using GSS-SPNEGO. When we try this against a Microsoft AD DC, the
ldap bind works successfully, however subsequent ldap_search requests
get no response from the server. I'm doing no signing or sealing of my
LDAP traffic and I negotiate my gss security contexts appropriately. 

 

I'd like to verify my code against a Samba 4 domain controller to see if
I get the same behavior.

 

We're using the latest MIT Krb5 1.5 release libraries which have the
SPNEGO GSS libraries as well.

 

Thanks in advance for any input on this.

 

Krishna