Yes, Howard would you have any idea what could be wrong? Should the built in SASL stuff in slapd cover this so i dont have to build with cyrus? Would it be possible that SASL/External could be disabled on solaris for security reasons?

On Sun, Jul 13, 2008 at 8:55 PM, Howard Chu <hyc@symas.com> wrote:
Quanah Gibson-Mount wrote:
--On Sunday, July 13, 2008 5:33 PM +0100 David Markey<admin@dmarkey.com>
wrote:

Sorry that was truncated

./configure --enable-modules --enable-overlays --with-cyrus-sasl
--prefix=/opt/uni --with-tls=no --enable-local=yes

So you are disabling TLS support, but you expect SASL/EXTERNAL (cert auth)
to work?

He's trying to use SASL/EXTERNAL over ldapi:// which uses Unix credentials, not TLS certificates. Pay attention.

--
 -- Howard Chu
 CTO, Symas Corp.           http://www.symas.com
 Director, Highland Sun     http://highlandsun.com/hyc/
 Chief Architect, OpenLDAP  http://www.openldap.org/project/