файл конфигурации LDAP / переменные среды (LDAP configuration file/environment variables)
GSSAPI OPTIONS
If OpenLDAP is built with Generic Security Services Application
Programming Interface support, there are more options you can
specify.
GSSAPI_SIGN <on/true/yes/off/false/no>
Specifies if GSSAPI signing (GSS_C_INTEG_FLAG) should be
used. The default is off.
GSSAPI_ENCRYPT <on/true/yes/off/false/no>
Specifies if GSSAPI encryption (GSS_C_INTEG_FLAG and
GSS_C_CONF_FLAG) should be used. The default is off.
GSSAPI_ALLOW_REMOTE_PRINCIPAL <on/true/yes/off/false/no>
Specifies if GSSAPI based authentication should try to
form the target principal name out of the ldapServiceName
or dnsHostName attribute of the targets RootDSE entry. The
default is off.