Re: LDAP and SASL...

[Todd Lyons <tlyons@ivenue.com>]

Tobias Rice wanted us to know:

>...so slapd knows to use saslauthd. Is there a switch to use to tell
>slapd to use this file? If I start slapd, 'slapd -d -1 2>1& | tee
>/tmp/output.txt' and try to ssh to the box with a test user, I would
>think that grep'ing the /tmp/output.txt for 'conf' would show it looking
>for the /usr/lib/sasl2/slapd.conf, but it's not in there.

Is slapd linked against the sasl libs?

[todd@tlyons ~]$ ldd /usr/sbin/slapd
        linux-gate.so.1 =>  (0xffffe000)
        libldap_r.so.2 => /usr/lib/libldap_r.so.2 (0x4002b000)
        liblber.so.2 => /usr/lib/liblber.so.2 (0x40060000)
        libdb-4.2.so => /usr/lib/libdb-4.2.so (0x4006d000)
        libodbc.so.1 => /usr/lib/libodbc.so.1 (0x40149000)
        libpthread.so.0 => /lib/tls/libpthread.so.0 (0x401ae000)
        libsasl2.so.2 => /usr/lib/libsasl2.so.2 (0x401bf000)
        libssl.so.0.9.7 => /usr/lib/libssl.so.0.9.7 (0x401d4000)
        libcrypto.so.0.9.7 => /usr/lib/libcrypto.so.0.9.7 (0x40205000)
        libcrypt.so.1 => /lib/libcrypt.so.1 (0x40305000)
        libresolv.so.2 => /lib/libresolv.so.2 (0x40332000)
        libltdl.so.3 => /usr/lib/libltdl.so.3 (0x40343000)
        libdl.so.2 => /lib/libdl.so.2 (0x4034a000)
        libc.so.6 => /lib/tls/libc.so.6 (0x4034d000)
        /lib/ld-linux.so.2 => /lib/ld-linux.so.2 (0x40000000)

>Strace doesn't show any attempt for /usr/lib/sasl2/slapd.conf either.

Make sure to use -f with strace so it follows forks.

-- 
Regards...		Todd
  We should not be building surveillance technology into standards.
  Law enforcement was not supposed to be easy.  Where it is easy, 
  it's called a police state.             -- Jeff Schiller on NANOG
Linux kernel 2.6.8.1-12mdkenterprise   4 users,  load average: 0.14, 0.22, 0.18