How to make anonymous SASL work?

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



devel - Fashion Content wrote:
> I have the mailserver and the directory on the same server.
>
> I have installed OpenLDAP client & libs and cyrus sasl.
> Fedora DS ldapsearch is not on the path.
> The Fedora DS now stores userPasswords as plaintext.
>
> saslauthd run with: MECH=ldap, FLAGS=-c
>
> saslauthd.conf:
>
> ldap_servers: ldap://127.0.0.1
> ldap_search_base: ou=People,dc=fashioncontent,dc=com
> ldap_bind_dn: cn=Directory Manager,dc=fashioncontent,dc=com
> ldap_bind_pw: secret
>
> ldap_filter: (&(objectClass=inetorgperson)(uid=%u))
> ldap_use_sasl: no
> ldap_auth_method: bind
> ldap_version: 3
> ldap_debug: 3
> ldap_verbose: on
> log_level: 255
>
>
> OpenLDAP ldapsearch: Shows userPassword results hashed, but otherwise 
> shows the users I look up
> OpenLDAP ldapsearch userPassword=secret: Success
> Fedora ldapsearch: Fails to find anything
> testsaslauthd -u devel -p secret: Fails to find anything, error code 
> 32 I think
It would be helpful if you could post the exact ldapsearch command line 
that you used both for openldap and for fedora ds, along with the exact 
output, or an excerpt of a few lines at least.
>
> I haven't figured out how to make saslauthd report the ldap queries, 
> so I know very little of what happens and the Fedora logs
> don't appear to help much more.
The fedora ds access log will show the tcp socket 
connection/disconnection and peer IP address, the BIND request and 
result, and the SRCH request and result.  If you need help interpreting 
the log output, please post an excerpt to this list.
>
> Henrik
> -- 
> Fedora-directory-users mailing list
> Fedora-directory-users at redhat.com
> https://www.redhat.com/mailman/listinfo/fedora-directory-users
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/x-pkcs7-signature
Size: 3178 bytes
Desc: S/MIME Cryptographic Signature
Url : http://lists.fedoraproject.org/pipermail/389-users/attachments/20060921/ba110c28/attachment.bin 


[Index of Archives]     [Fedora User Discussion]     [Older Fedora Users]     [Fedora Announce]     [Fedora Package Announce]     [EPEL Announce]     [Fedora News]     [Fedora Cloud]     [Fedora Advisory Board]     [Fedora Education]     [Fedora Security]     [Fedora Scitech]     [Fedora Robotics]     [Fedora Maintainers]     [Fedora Infrastructure]     [Fedora Websites]     [Anaconda Devel]     [Fedora Devel Java]     [Fedora Legacy]     [Fedora Desktop]     [Fedora Fonts]     [ATA RAID]     [Fedora Marketing]     [Fedora Management Tools]     [Fedora Mentors]     [Fedora Package Review]     [Fedora R Devel]     [Fedora PHP Devel]     [Kickstart]     [Fedora Music]     [Fedora Packaging]     [Centos]     [Fedora SELinux]     [Fedora Legal]     [Fedora Kernel]     [Fedora QA]     [Fedora Triage]     [Fedora OCaml]     [Coolkey]     [Virtualization Tools]     [ET Management Tools]     [Yum Users]     [Tux]     [Yosemite News]     [Yosemite Photos]     [Linux Apps]     [Maemo Users]     [Gnome Users]     [KDE Users]     [Fedora Tools]     [Fedora Art]     [Fedora Docs]     [Maemo Users]     [Asterisk PBX]     [Fedora Sparc]     [Fedora Universal Network Connector]     [Fedora ARM]

  Powered by Linux