Hello!

I am having an issue with icedove and LDAP/GSSAPI.

I am trying to connect Icedove to our organization's LDAP server.  In order to
get access to non-public information (like phone numbers and email addresses),
I need to use GSSAPI for authentication (simple binding is not supported).

I am able to do GSSAPI authentication with the `ldapsearch` command, so I know
that my Kerberos credentials are OK.

I am attaching a packet capture, showing the attempted bind, and the failure.
Wireshark reports that the bind is failing with the following error:

generic failure: protocol violation: client requested invalid layer

Please let me know if you need any more info!

Hello!

I did some searching upstream, and it looks like this is upstream bug
#655074.  I found that this issue still exists in the latest version of
upstream (version 38.0a2), and I also found that turning on SSL solves
the problem.  At least, I think it solves the problem, because debug
messages show Icedove moving on to executing a search.  The search
doesn't work, but I think that's because of something else.

So, the workaround for this issue (including in Icedove) is to use SSL
for the LDAP connection at the same time that you are using GSSAPI.  Of
course, this probably won't work for everyone.

Anyway, all my notes have been added to the upstream bug!

~ Karl

forwarded 779368 https://bugzilla.mozilla.org/show_bug.cgi?id=655074
tags 779368 help upstream
thanks

Thanks for your additional infos, I added the upstream bugzilla url and
the tag for needing help.
As Christoph, Guido and myself are not really working with LDAP we can not
provide any useful help. So hopefully someone can investigate the issues
here.

Regards
Carsten