Hi,
What I'm trying to do is change the password[1] of user guest to see if my chain overlay will work with saslmech=external. Referring from this email[2] this should be working. But I'm a bit I confused cause I can't get this working while my syncrepl is working well. TIA
[1] ldappaswd -s newPasswd - Set the new password to newPasswd. [2] http://www.openldap.org/lists/openldap-software/200808/msg00113.html
--
Greek Ordono
myppa: launchpad.net/~grexk/+archive/ppa
--- On Wed, 7/15/09, Gavin Henry ghenry@suretecsystems.com wrote:
From: Gavin Henry ghenry@suretecsystems.com Subject: Re: saslmech=EXTERNAL To: "Quanah Gibson-Mount" quanah@zimbra.com, "Greek Ordono" grexk@yahoo.com Cc: "openldap-software@openldap.org" openldap-software@openldap.org Date: Wednesday, July 15, 2009, 10:22 PM
Also, -stseug is wrong. It should be:
[-s base|one|sub]
--On Friday, July 17, 2009 5:44 PM -0700 Greek Ordono grexk@yahoo.com wrote:
Hi,
What I'm trying to do is change the password[1] of user guest to see if my chain overlay will work with saslmech=external. Referring from this email[2] this should be working. But I'm a bit I confused cause I can't get this working while my syncrepl is working well. TIA
As I said, by using the "-x" mechanism, you are completely disabling SASL. Thus no SASL/EXTERNAL method is going to work.
--Quanah
--
Quanah Gibson-Mount Principal Software Engineer Zimbra, Inc -------------------- Zimbra :: the leader in open source messaging and collaboration
Quanah Gibson-Mount wrote:
--On Friday, July 17, 2009 5:44 PM -0700 Greek Ordonogrexk@yahoo.com wrote:
Hi,
What I'm trying to do is change the password[1] of user guest to see if my chain overlay will work with saslmech=external. Referring from this email[2] this should be working. But I'm a bit I confused cause I can't get this working while my syncrepl is working well. TIA
As I said, by using the "-x" mechanism, you are completely disabling SASL. Thus no SASL/EXTERNAL method is going to work.
You're talking about different things. "-x" on the commandline affects authentication between the client and the slapd. But he's talking about slapd being a read-only consumer with chaining to forward writes to a provider. In particular, he's talking about the authentication from the chain overlay to the provider. And obviously -x on the commandline has nothing to do with this question whatsoever.
openldap-software@openldap.org
-
Greek Ordono -
Howard Chu -
Quanah Gibson-Mount