Re: Authenticate to ldap using Kerberos

On 08/09/10 12:15 -0500, Dan White wrote:

To have slapd use saslauthd for authentication, you'll need to create the file /usr/lib/sasl2/slapd.conf, with these contents:

pwcheck_method: saslauthd mech_list: plain login

and optionally

keytab: /etc/krb5.keytab (which is the standard location)

Check that. That should be:

pwcheck_method: saslauthd mech_list: plain login gssapi external keytab: /etc/krb5.keytab

Do you have ldap/acorn.squirrel@SQUIRREL in /etc/krb5.keytab, on the server? Is it readable by the slapd user?

Also see:

http://www.cyrusimap.org/mediawiki/index.php/FAQ#Cyrus_SASL_Questions