[Date Prev][Date Next] [Chronological] [Thread] [Top]

Re: Getting LDAP and SASL (digest-md5) to play nice

To: Tony Earnshaw <tonni@hetnet.nl>
Subject: Re: Getting LDAP and SASL (digest-md5) to play nice
From: Michael Ströder <michael@stroeder.com>
Date: Fri, 07 Mar 2008 11:41:45 +0100
Cc: openldap-software@openldap.org
In-reply-to: <47D07C0F.3050009@hetnet.nl>
References: <47CF3B9C.4000102@socal.rr.com> <hbf.20080306htfy@bombur.uio.no> <47CFCE1E.7020703@symas.com> <47D02FA6.3080305@socal.rr.com> <47D03BE3.1070400@symas.com> <47D047DE.4000403@socal.rr.com> <47D07C0F.3050009@hetnet.nl>
User-agent: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.8.1.12) Gecko/20080201 SeaMonkey/1.1.8

Tony Earnshaw wrote:

You need one more attribute there, an operational attribute that you can add with ldapmodify: authzTo.

No, the authzTo attribute has nothing to do with mapping a SASL identity to a LDAP entry DN!

It is used for specifying the set of possible authz-DNs for a specific authc-DN when proxy authorization control is sent along with a LDAP request by this identity. This is a totally different thing.

Ciao, Michael.

Follow-Ups:
- Re: Getting LDAP and SASL (digest-md5) to play nice
  - From: Tony Earnshaw <tonni@hetnet.nl>

References:
- Getting LDAP and SASL (digest-md5) to play nice
  - From: Rick Stevens <rps2@socal.rr.com>
- Re: Getting LDAP and SASL (digest-md5) to play nice
  - From: Hallvard B Furuseth <h.b.furuseth@usit.uio.no>
- Re: Getting LDAP and SASL (digest-md5) to play nice
  - From: Howard Chu <hyc@symas.com>
- Re: Getting LDAP and SASL (digest-md5) to play nice
  - From: Rick Stevens <rps2@socal.rr.com>
- Re: Getting LDAP and SASL (digest-md5) to play nice
  - From: Howard Chu <hyc@symas.com>
- Re: Getting LDAP and SASL (digest-md5) to play nice
  - From: Rick Stevens <rps2@socal.rr.com>
- Re: Getting LDAP and SASL (digest-md5) to play nice
  - From: Tony Earnshaw <tonni@hetnet.nl>

Prev by Date: Re: Getting LDAP and SASL (digest-md5) to play nice
Next by Date: openldap 2.4.8 and autogroup contrib
Index(es):
- Chronological
- Thread