Hii List,
I am trying to get LDAP with SASL-GSSAPI
mechanism.
I have openldap-2.4.7 on RHEL 4.
I have installed Cyrus sasl-2.1.21.
I have compiled LDAP with cyrus
SASL support as:
[root@as3 libexec]# env LD_LIBRARY_PATH="/usr/local/BerkeleyDB.4.6/lib:/usr/loc
al/lib/sasl2:/usr/local/ssl/lib"
CPPFLAGS="-I/usr/local/BerkeleyDB.4.6/include
-I/usr/local/ssl/include -I/usr/local/include"
LDFLAGS="-L/usr/local/ssl/lib -L
/usr/local/BerkeleyDB.4.6/lib -L/usr/local/lib/sasl2
" LIBS=-ldl ./configure --with-tls=openssl --with-cyrus-sasl
It was fine.
SASL was compiled as:
$ ./configure --disable-cram
--disable-digest --disable-krb4 --disable-otp --enable-gssapi --with-gss_impl=mit
In /usr/lib/sasl2,it has
[root@as3 sasl2]# ls libgssapi*
libgssapiv2.la libgssapiv2.so
libgssapiv2.so.2 libgssapiv2.so.2.0.19
When I run :
[root@as3 libexec]# saslauthd -V
saslauthd 2.1.21
authentication mechanisms: getpwent
rimap shadow
I also have a working kerberos .I am
able to get tickets from kerberos.I have added ldap host principal to kerberos
database.
I have my slapd.conf as: (sasl related
part)
sasl-host as3
sasl-realm BSNL.COM
authz-regexp uid=([^,]*),cn=bsnl.com,cn=gssapi,cn=auth
uid=$1,ou=people,dc=bsnl,dc=com
(Also,I have added the first two lines
after seing some mailing list.In the admin guide nothing was mentioned
about adding the two lines.Please tell me whether it is correct?)
According to HOWTO doc from www.bayour.com,when
we query ldap for supportedSASLMechanisms,it should show GSSAPI(my whole
purpose).But
when I give the following:
[root@as3 openldap]# /usr/bin/ldapsearch
-H "ldaps://:12345" -x -b "" -s base -LLL supportedSASLMechanisms
dn:
supportedSASLMechanisms: NTLM
supportedSASLMechanisms: PLAIN
supportedSASLMechanisms: LOGIN
Does it mean that LDAP was not built
with SASL support?
I have slapd.conf in /usr/lib/sasl2
as:
pwcheck_method: /usr/sbin/saslauthd
saslauthd_path: /var/run/saslauthd/mux
mech_list: plain login ntlm kerberos5
I am not able to get SASL-GSSAPI as
supportedSASLMechanism.From where does the LDAP get this list?
What should I do to add one more mechanism
to supportedSASLMechanisms list?
What may be the problem.....?
Please guide me....I was struck at this
point and not able to come out
Thanx a lot in advance.....
Thanx and Regards,
Padmavathi
=====-----=====-----=====
Notice: The information contained in this e-mail
message and/or attachments to it may contain
confidential or privileged information. If you are
not the intended recipient, any dissemination, use,
review, distribution, printing or copying of the
information contained in this e-mail message
and/or attachments to it are strictly prohibited. If
you have received this communication in error,
please notify us by reply e-mail or telephone and
immediately and permanently delete the message
and any attachments. Thank you