Dan White dwhite@olp.net wrote:
Verify that your password, stored within userPassword, is in plain text (when uudecoded). I do not recommend attempting to use 'pwcheck_method: auprop-hashed' with the slapd auxprop.
If not, you could inject saslauthd (with ldap backend) into the mix to support hashed password storage for SASL PLAIN and LOGIN binds. However, DIGEST-MD5 will not work with saslauthd.
That is the missing bit: I though LDAPDB was able to check hashed passwords with PLAIN and LOGIN. I will retry with saslauthd.