Re: SASL EXTERNAL with URLs other than ldapi://

[Jan-Piet Mens <jpm@retail-sc.com>]

On Thu Feb 10 2005 at 15:38:43 CET, Rodolfo Broco Manin wrote:

> This may be a silly question, but... how can I use SASL's "EXTERNAL"
> mechamism with OpenLDAP over network connections (ldap:// and ldaps://
> URLs)?  Here at my site I can see "supportedSASLMechanisms: EXTERNAL"
> only when connecting via a ldapi:// URL.
...
> (It's not available using TLS or SSL)
> # ldapsearch -x -Z -H ldap://localhost -b "" -LLL -s base

Try forcing TLS with another -Z or using ldaps://localhost

$ ldapsearch -x -ZZ -H ldap://localhost -b "" -LLL -s base
                  ^

$ ldapsearch -x -H ldaps://localhost -b "" -LLL -s base
                       ^