[Date Prev][Date Next] [Chronological] [Thread] [Top]

Re: I cannot auth against SASL

--On Thursday, June 30, 2011 10:22 PM +0200 Dieter Kluenter <dieter@dkluenter.de> wrote:

Frankly, I don't understand what you are trying to do.
You either bind by means of simple bind (which is DN and password), or
by a sasl based strong bind. In order to use a strong bind you have
several choices, either openldap's own sasl framework or an external
mechanism that provides authentication.
In order to use SASL authentication by means of openldap's sasl
framework i.e. password and uid based credentials, the stored
userPassword attribute value has to be cleartext, otherwise it is not
possible to create an apropriate challenge.

Not true with SASL/GSSAPI. In that case, there should be *no* userPassword attribute at all.



Quanah Gibson-Mount
Sr. Member of Technical Staff
Zimbra, Inc
A Division of VMware, Inc.
Zimbra ::  the leader in open source messaging and collaboration