[Date Prev][Date Next] [Chronological] [Thread] [Top]

Re: SASL EXTERNAL with URLs other than ldapi://

To: Igor Brezac <igor@ipass.net>
Subject: Re: SASL EXTERNAL with URLs other than ldapi://
From: Howard Chu <hyc@symas.com>
Date: Thu, 10 Feb 2005 22:36:14 -0800
Cc: rodolfo@ime.unicamp.br, openldap-software@OpenLDAP.org
In-reply-to: <Pine.GSO.4.62.0502110023300.8613@jupiter.portbridge.com>
References: <420B71F3.2090202@ime.unicamp.br> <20050210152547.GA28381@m1.intdus.retail-sc.com> <Pine.GSO.4.62.0502101052150.22909@jupiter.portbridge.com> <44682.200.183.90.171.1108080080.squirrel@200.183.90.171> <Pine.GSO.4.62.0502110023300.8613@jupiter.portbridge.com>
User-agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8b) Gecko/20050130

Igor Brezac wrote:

Btw, does somebody have the "EXTERNAL" sasl mech. available via ldap:// or ldaps:// ???
I have it working. This will only work for ldaps://. SASL EXTERNAL uses TLS for authentication among other things. SASL EXTERNAL is also available over ldapi.

SASL EXTERNAL works whenever TLS is being used and a client certificate is configured. So it will work for ldaps:// by itself and also ldap:// with StartTLS.

--
 -- Howard Chu
 Chief Architect, Symas Corp.       Director, Highland Sun
 http://www.symas.com               http://highlandsun.com/hyc
 Symas: Premier OpenSource Development and Support

References:
- SASL EXTERNAL with URLs other than ldapi://
  - From: Rodolfo Broco Manin <rodolfo@ime.unicamp.br>
- Re: SASL EXTERNAL with URLs other than ldapi://
  - From: Jan-Piet Mens <jpm@retail-sc.com>
- Re: SASL EXTERNAL with URLs other than ldapi://
  - From: Igor Brezac <igor@ipass.net>
- Re: SASL EXTERNAL with URLs other than ldapi://
  - From: rodolfo@ime.unicamp.br
- Re: SASL EXTERNAL with URLs other than ldapi://
  - From: Igor Brezac <igor@ipass.net>

Prev by Date: Re: SASL EXTERNAL with URLs other than ldapi://
Next by Date: Referral behaviour: LDAP_RES_SEARCH_REFERENCE
Index(es):
- Chronological
- Thread