"Pantejo Barbara-XJC864" XJC864@motorola.com writes:
I have a NIS server that authenticates its users against a central LDAP server. To verify that it uses DIGEST-MD5 authentication, I ran the following command:
[snip] $ ldapsearch -Y DIGEST-MD5 -h ids.mot.com -b ou=people,ou=intranet,dc=motorola,dc=com -D motguid=XJC864,ou=people,ou=intranet,dc=motorola,dc=com -W -v motguid=XJC864 ldap_init( ids.mot.com, 0 ) Enter LDAP Password: SASL/DIGEST-MD5 authentication started ldap_sasl_interactive_bind_s: Invalid credentials additional info: SASL(-1): generic failure: unable canonify user and get auxprops $ [snap]
As you can see, it starts MD5 authentication but get this error (even though I enter the correct password). Has anyone encountered and fixed such an error? Does anyone know how to troubleshoot this error? Any assistance would be appreciated.
Don't use the -D flag but -U flag with and a uid value.
-Dieter