ldapsearch -LLL -x -H ldap://1.2.3.4 -s "base" -b "" supportedSASLMechanisms

That ldapsearch returns :

dn:

supportedSASLMechanisms: PLAIN

I tried this as well :

ldapsearch -h localhost -Y digest-md5 -U my_userid -w my_password -v '(objectClass=*)'

ldap_initialize( ldap://localhost )

SASL/DIGEST-MD5 authentication started

ldap_sasl_interactive_bind_s: Authentication method not supported (7)

additional info: SASL(-4): no mechanism available:

Tim

On Thu, Dec 31, 2015 at 9:51 AM, Timothy Keith <timothy.g.keith@gmail.com> wrote:

Dan, that ldapsearch returns :
dn:
supportedSASLMechanisms: PLAIN

On Wed, Dec 30, 2015 at 7:04 PM, Dan White <dwhite@cafedemocracy.org> wrote:
On 12/30/15 18:51 -0600, Timothy Keith wrote:

This is tail of the latest saslauthd debug output :

ldap_sasl_interactive_bind: user selected: DIGEST-MD5

res_errno: 7, res_error: <SASL(-4): no mechanism available: >, res_matched:
<>
ldap_free_request (origid 1, msgid 1)
ldap_int_sasl_bind: DIGEST-MD5
ldap_parse_sasl_bind_result
ldap_parse_result
ldap_msgfree
ldap_err2string

Is DIGEST-MD5 available on your ldap server? Try:

ldapsearch -LLL -x -H ldap://1.2.3.4 -s "base" -b "" supportedSASLMechanisms
Which should list the advertised sasl mechanisms.

Verify the digest-md5 mechanism is installed with saslpluginviewer/pluginviewer.

--
Dan White