[Date Prev][Date Next] [Chronological] [Thread] [Top]

Re: SASL DIGEST-MD5 works but PLAIN/LOGIN fails



Howard Chu wrote:
> Michael Ströder wrote:
>> The trace shows for PLAIN or LOGIN
>> (running slapd -d config,stats,stats2,acl,args,trace):
>>
>> SASL [conn=1002] Error: unknown password verifier(s) slapd
>>
>> My /usr/lib64/sasl.conf contains:
>> ---------------------------- snip ----------------------------
>> pwcheck_method: slapd
>> mech_list: plain login digest-md5 external
>> ---------------------------- snip ----------------------------
>> I've checked that this is the right file by setting "pwcheck_method: foobar"
>> which appears in the logs then.
> 
> There is no such pwcheck_method. The SASL error message is correct.

Ouch! Thanks!

http://cyrusimap.org/docs/cyrus-sasl/2.1.25/options.php

"and those that are therefore most commonly misunderstood are pwcheck_method
and auxprop_plugin"

Ah, yes.

But... the methods 'authdaemond' and 'saslauthd' are not an option since I
don't want to run another demon. 'pwcheck' does also not seem to be avaiable.

It only works with clear-text userPassword values when setting
pwcheck_method: auxprop

Obviously I don't want that.

Ciao, Michael.


Attachment: smime.p7s
Description: S/MIME Cryptographic Signature