--On Thursday, June 30, 2011 10:22 PM +0200 Dieter Kluenter dieter@dkluenter.de wrote:
Frankly, I don't understand what you are trying to do. You either bind by means of simple bind (which is DN and password), or by a sasl based strong bind. In order to use a strong bind you have several choices, either openldap's own sasl framework or an external mechanism that provides authentication. In order to use SASL authentication by means of openldap's sasl framework i.e. password and uid based credentials, the stored userPassword attribute value has to be cleartext, otherwise it is not possible to create an apropriate challenge.
Not true with SASL/GSSAPI. In that case, there should be *no* userPassword attribute at all.
--Quanah
--
Quanah Gibson-Mount Sr. Member of Technical Staff Zimbra, Inc A Division of VMware, Inc. -------------------- Zimbra :: the leader in open source messaging and collaboration