ldap stronger authentication required error after upgrade

[Andrew Bartlett]

On Fri, 2011-01-07 at 20:02 -0500, Aaron Solochek wrote:
> On 01/07/2011 06:51 PM, Brad Hards wrote:
> > On Saturday, January 08, 2011 10:29:01 am Aaron Solochek wrote:
> >> So what changed that would cause this, and how to fix it?  I have a wiki
> >> that was authenticating against ldap, and now no one can log in.
> > It might have been easier to tell if you could have described which version 
> > worked and which version didn't, but you're probably using an anonymous bind, 
> > which isn't allowed in more recent samba versions. 
> > 
> > To fix it, authenticate the ldap bind.
> > 
> 
> No, it's not an anonymous bind, I'm authenticating as an admin.
> 
> The version that worked was, I believe
> 
> 4.0.0~alpha14~bzr14682~ppa170+191~maverick1
> 
> The version that doesn't is
> 
> 4.0.0~alpha14~bzr15953~ppa174+199~maverick

Sadly those versions don't mean anything.  We will need the GIT hashes
to be able to line these up to dates.  

However, I think you should confirm with a network capture that you are
not doing any searches or other operations before that administrative
bind.  These will now be rejected as they are anonymous. 

Andrew Bartlett

-- 
Andrew Bartlett                                http://samba.org/~abartlet/
Authentication Developer, Samba Team           http://samba.org
Samba Developer, Cisco Inc.