30 Aug
2021
30 Aug
'21
9:42 a.m.
https://bugs.openldap.org/show_bug.cgi?id=9657
--- Comment #1 from Michael Ströder michael@stroeder.com --- On 8/30/21 18:35, openldap-its@openldap.org wrote:
This is inconsistent. SASL bind shall also request only AUTH access to the userPassword, just as SIMPLE BIND does.
Isn't that somewhat expected?
SASL has to find the user's entry and this requires at least auth access to the entry pseudo attribute.
Furthermore there are various password-less SASL mechs for which you might also want to have some authc access control, e.g. for temporarily deactivating authc.
--
You are receiving this mail because:
You are on the CC list for the issue.