[Date Prev][Date Next] [Chronological] [Thread] [Top]

Re: SASL PAM Authentication

To: Craig Gallek <cgallek@andrew.cmu.edu>
Subject: Re: SASL PAM Authentication
From: Roland Bauerschmidt <rb@debian.org>
Date: Mon, 15 Sep 2003 16:38:13 +0200
Cc: openldap-software@OpenLDAP.org
Content-disposition: inline
In-reply-to: <1063475959.833.14.camel@hotrod>
References: <1063434531.730.24.camel@hotrod> <1063439227.2393.21.camel@urkle.vernon.hills> <1063475959.833.14.camel@hotrod>
User-agent: Mutt/1.5.4i

Craig Gallek wrote:
> I'm using the Debian slapd package so slapd.conf is in /etc/ldap. 
> OpenLDAP is compiled with sasl support.  The result of 'ldapsearch -x -s
> base -b "" supportedSASLMechanisms' is listed below.  I'm not using the
> -x option for any other commands if that is what you mean by simple
> binding.

Careful: We are talking about two different slapd.conf files here. The
slapd.conf in /etc/ldap is OpenLDAP's slapd.conf, whereas SASL has its
own configuration files in /usr/lib/sasl2 [1]. The "pwcheck_method:
saslauthd" goes in SASL's slapd.conf which is /usr/lib/sasl2/slapd.conf.
Try that.

Roland

[1] actually, this should be somewhere in /etc instead of /usr/lib; I'll
    have a look at that later

References:
- SASL PAM Authentication
  - From: Craig Gallek <cgallek@andrew.cmu.edu>
- Re: SASL PAM Authentication
  - From: Edward Rudd <eddie@omegaware.com>
- Re: SASL PAM Authentication
  - From: Craig Gallek <cgallek@andrew.cmu.edu>

Prev by Date: [openldap2.1.12] corruption dB problem
Next by Date: slapd.conf - acl question
Index(es):
- Chronological
- Thread