Yes, Howard would you have any idea what could be wrong? Should the built in SASL stuff in slapd cover this so i dont have to build with cyrus? Would it be possible that SASL/External could be disabled on solaris for security reasons?<br>
<br><div class="gmail_quote">On Sun, Jul 13, 2008 at 8:55 PM, Howard Chu &lt;<a href="mailto:hyc@symas.com">hyc@symas.com</a>&gt; wrote:<br><blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">
<div class="Ih2E3d">Quanah Gibson-Mount wrote:<br>
<blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">
--On Sunday, July 13, 2008 5:33 PM +0100 David Markey&lt;<a href="mailto:admin@dmarkey.com" target="_blank">admin@dmarkey.com</a>&gt;<br>
wrote:<br>
<br>
<blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">
Sorry that was truncated<br>
<br>
./configure --enable-modules --enable-overlays --with-cyrus-sasl<br>
--prefix=/opt/uni --with-tls=no --enable-local=yes<br>
</blockquote>
<br>
So you are disabling TLS support, but you expect SASL/EXTERNAL (cert auth)<br>
to work?<br>
</blockquote>
<br></div>
He&#39;s trying to use SASL/EXTERNAL over ldapi:// which uses Unix credentials, not TLS certificates. Pay attention.<br><font color="#888888">
<br>
-- <br>
 &nbsp;-- Howard Chu<br>
 &nbsp;CTO, Symas Corp. &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; <a href="http://www.symas.com" target="_blank">http://www.symas.com</a><br>
 &nbsp;Director, Highland Sun &nbsp; &nbsp; <a href="http://highlandsun.com/hyc/" target="_blank">http://highlandsun.com/hyc/</a><br>
 &nbsp;Chief Architect, OpenLDAP &nbsp;<a href="http://www.openldap.org/project/" target="_blank">http://www.openldap.org/project/</a><br>
</font></blockquote></div><br>