Rob See wrote: > Hi, > > I'm working on getting SASL up and running with FDS 1.0.2 and have > run into some problems. It seems that the SASL Mappings are being > completely ignored. > > Here is my setup: > > Kerberos domain of SUB.BLAH.EDU > Ldap entry for uid=rob,ou=People,dc=sub,dc=blah,dc=edu > > This is the map entry (the only map entry that I have): > > # map1, mapping, sasl, config > dn: cn=map1,cn=mapping,cn=sasl,cn=config > objectClass: top > objectClass: nsSaslMapping > cn: map1 > nsSaslMapRegexString: (.*)/admin at .* > nsSaslMapBaseDNTemplate: uid=\1,ou=People,dc=sub,dc=blah,dc=edu > nsSaslMapFilterTemplate: (objectclass=*) > > I've restarted the service which doesn't seem to fix it. > > When I kinit with rob/admin, running ldapsearch -Y GSSAPI gets the > following error: > SASL/GSSAPI authentication started > ldap_sasl_interactive_bind_s: Invalid credentials (49) > additional info: SASL(-14): authorization failure: > > when I kinit with rob, it works without a problem > > Does anyone have any suggestions, or have I run into a bug of some sort ? Does this help? - http://directory.fedora.redhat.com/wiki/Howto:Kerberos > > Also is there any way to turn up the log level to get more info ? Sure. You can use the TRACE level in the error log. > > Thanks, > -Rob > > -- > Fedora-directory-users mailing list > Fedora-directory-users at redhat.com > https://www.redhat.com/mailman/listinfo/fedora-directory-users -------------- next part -------------- A non-text attachment was scrubbed... Name: smime.p7s Type: application/x-pkcs7-signature Size: 3178 bytes Desc: S/MIME Cryptographic Signature Url : http://lists.fedoraproject.org/pipermail/389-users/attachments/20060517/9911ce84/attachment.bin
