DBD::Sybase and Kerberos

[mike....@ubs.com]

Hi,

I successfully compiled DBD::Sybase 1.14_1 against SDK 15.7 ESD7. The make test PASSED all tests:

PERL_DL_NONLAZY=1 /sbclocal/sybase_dumps_1/perl/64-bit/perl/5.16.1/bin/perl "-MExtUtils::Command::MM" "-e" "test_harness(0, 'blib/lib', 'blib/arch')" t/*.t

t/autocommit.t .. ok

t/base.t ........ ok

t/exec.t ........ ok

t/fail.t ........ ok

t/login.t ....... ok

t/main.t ........ ok

t/multi_sth.t ... ok

t/nsql.t ........ ok

t/place.t ....... ok

t/thread.t ...... ok

t/utf8.t ........ ok

t/xblk.t ........ ok

t/xblob.t ....... ok

All tests successful.

Files=13, Tests=252,  8 wallclock secs ( 0.31 usr  0.09 sys +  2.10 cusr  2.60 csys =  5.10 CPU)

Result: PASS

I am able to connect normally to an instance. /opt/csm/64-bit/perl/5.16.1/bin/perl ./test_std.pl

      : rownmb = '2', col [0]: 'Mar 29 2013  5:03PM'

      : rownmb = '2', col [1]: '47'

      : rownmb = '2', col [2]: '913'

      : rownmb = '3', col [0]: 'CH_ESD4_SQL'

      : rownmb = '4', col [0]: 'Adaptive Server Enterprise/15.0.3/EBF 20615 ESD#4.2/P/Sun_svr4/OS 5.8/ase1503/2814/64-bit/FBO/Sat Dec  8 16:16:43 2012'

I am having problems connecting via kerberos=<principle>. isql –V works fine:

isql -V

1> select @@authmech

2> go

                               

 ------------------------------

 kerberos                      

(1 row affected)

        isql version:

        Sybase CTISQL Utility/15.7/P-EBF20743 ESD #7/DRV.15.7.0.7/SPARC/Solaris 10/BUILD1570-023/OPT/Sun Jan  6 23:07:06 2013

The error returned in the errorlog is:

00:00000:03589:2013/03/29 16:54:24.63 kernel  Connectivity Library (Security Control Layer) Error: Consistency checks performed on the credential failed (minor status -1765328349).

01:00000:03589:2013/03/29 16:54:24.63 server  SCL error in function: sec_negotiate. Operation: scl_sess_bind().

I searched for the minor error status returned above in

https://andromeda.rutgers.edu/~sysmail/krb5_error.html

 

-1765328349      KRB5KRB_AP_ERR_NOT_US  The ticket isn't for us

        The ASE version is:

        Adaptive Server Enterprise/15.0.3/EBF 20615 ESD#4.2/P/Sun_svr4/OS 5.8/ase1503/2814/64-bit/FBO/Sat Dec  8 16:16:43 2012

The error returned from the test script is:

DBI connect('server=CH_ESD4_SQL;kerberos=sybeng','',...) failed: Server message number=4054 severity=14 state=1 line=0 server=CH_ESD4_SQL text=Protocol negotiation failed during security session establishment.

 OpenClient message: LAYER = (4) ORIGIN = (1) SEVERITY = (4) NUMBER = (44)

Server CH_ESD4_SQL, database

Message String: ct_connect(): protocol specific layer: external error: The attempt to connect to the server failed.

 at /home/mvw/sybase/projects/ldap/test_krb.pl line 8.

unable to connect to CH_ESD4_SQL at /home/mvw/sybase/projects/ldap/test_krb.pl line 8

Any help is much appreciated.

Comments, concerns, suggestions, etc… please email, chat, or call me.

Mike Wagner

External Tel.          +1.312.525.6917

Internal Tel.           193316917

Chat ID                   mvw