https://bugs.openldap.org/show_bug.cgi?id=10165
Issue ID: 10165 Summary: back-meta fails to bind to target when proxying an internal operation Product: OpenLDAP Version: 2.6.7 Hardware: All OS: All Status: UNCONFIRMED Keywords: needs_review Severity: normal Priority: --- Component: backends Assignee: bugs@openldap.org Reporter: nivanova@symas.com Target Milestone: ---
When the target is configured as follows:
idassert-bind bindmethod=sasl saslmech=EXTERNAL authz=proxyauthz flags=override
and an overlay issues an internal operation, back-meta attempts to open a new connection to the target, but the bind fails, so the internal operation cannot be executed.
The target server returns the following error (as logged by back-meta): <unauthenticated bind (DN with no password) disallowed>
Example configuration of the target server:
authz-regexp gidNumber=.*+uidNumber=.*,cn=peercred,cn=external,cn=auth cn=config
logfile ./main.log
database config
database mdb directory ./main rootdn cn=config suffix o=example.com
overlay accesslog logdb cn=log logops writes logsuccess true
database mdb suffix cn=log directory ./log