Mailing-List: contact dev-help@directory.apache.org; run by ezmlm
Precedence: bulk
Reply-To: "Apache Directory Developers List" <dev@directory.apache.org>
Received-SPF: pass (herse.apache.org: domain of enriquer9@gmail.com designates
 64.233.184.227 as permitted sender)
DomainKey-Signature: a=rsa-sha1; c=nofws;
        d=gmail.com; s=beta;
        h=received:message-id:date:from:reply-to:to:subject:in-reply-to:mime-version:content-type:content-transfer-encoding:content-disposition:references;
        b=Me+ZP6rTEtARaYonGK+wDh2+UEcubbyHrDKw4wF+xcu5ux0D45JqmbHpR8fL/jLlG9Rkk2Nhwig/96rwRwCKdxKLOcj/BqTfiIM8Lfr536ehu4+78s1LUYkHe+VbBXF3ZtpLZr11ObMJ86vDRlhroksQVlOCU3PpOSXYntTYxJU=
Message-ID: <568753d90705081638g518907ccj6b1769a39fbd6608@mail.gmail.com>
Date: Tue, 8 May 2007 16:38:51 -0700
From: "Enrique Rodriguez" <enriquer9@gmail.com>
Reply-To: erodriguez@apache.org
To: "Apache Directory Developers List" <dev@directory.apache.org>
Subject: Re: [ApacheDS] SASL Branch
In-Reply-To: <a32f6b020705081626k5d065f6v100bb62eefbac768@mail.gmail.com>
MIME-Version: 1.0
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit
Content-Disposition: inline
References: <a32f6b020705081626k5d065f6v100bb62eefbac768@mail.gmail.com>

On 5/8/07, Alex Karasulu <akarasulu@apache.org> wrote:
> I started to take a look at the sasl branch so you can merge it into the
> trunk however
> it seems the SaslBindTest fails for some reason.

Test log would be helpful but I suspect it is the Kerberos port
binding issue I mentioned, namely that the JDK Kerberos client doesn't
allow you to specify port in code, so it will default to the Kerberos
port, 88, which requires root to bind.

I just ran the tests OK ... as root.

> Also if this is an
> integration test that
> starts up the server you should use SaslBindITest (note ITest instead of
> Test) so this
> test is run when you include a -Dintegration on the command line.  Since
> these tests
> which start the server repeatedly for each test case can take a while to run
> we use
> a maven profile to trigger then when this integration property is defined.

Good point, I will adjust that if you don't before me.  Yes, it is an
integration test.

> BTW where was that document which you wrote describing the SASL work you did
> on this branch.  I just want to read it before continuing to review the code
> here.

Looks like Christine moved it to 1.0?  Did you guys discuss
backporting this at AC EU?  I was expecting this to go into 1.5.1.

Direct SASL page:
http://cwiki.apache.org/confluence/display/DIRxSRVx10/SASL+Authentication+to+ApacheDS

1.0 AUG:
http://cwiki.apache.org/confluence/display/DIRxSRVx10/ApacheDS+v1.0+Advanced+User%27s+Guide

Enrique