Hello list, Sorry for barging into this discussion but I am using LDAP passthrough-auth to an AD and in order to do this with saslauthd on Ubuntu (which may work different in this regard as your Gentoo) you absolutely have to do: usermod -a -G sasl openldap in order for the mux socket of saslauthd to be available by openldap (assuming here that openLDAP runs under user openldap). Without this, openLDAP simply cannot talk with/use saslauthd. There also might be some apparmor/SELinux etc. relevant part on your system that prevents those two systems communicating with each other. Basically, if tests with testsaslauthd -u user@domain -p password work correctly, then an {SASL}user@domain entry in the userPassword field should suffice for the passthrough authentication after having done the permission stuff above. Hopefully this helps. On 28.07.22 18:01, Stéphane Veyret wrote: -- rene.gallati(a)ergon.ch T +41 44 268 83 10 Ergon Informatik AG, Merkurstrasse 43, CH-8032 Zürich www.ergon.ch smart people – smart software * * * * * * * * * * * * * * * * * * * * * * * * * DELIVERING TECHNOLOGY ADVANTAGE SINCE 1984

Hi Stépane, ah ok, while my socket has the same access mode, the directory (/run/saslauthd ) itself belongs to root but has group execution access for group sasl - this is why I need the group access right: # ls -la saslauthd/ total 4 drwx--x--- 2 root sasl 100 Jun 16 18:43 . drwxr-xr-x 31 root root 1000 Aug 9 08:00 .. srwxrwxrwx 1 root root 0 Jun 16 18:43 mux -rw------- 1 root root 0 Jun 16 18:43 mux.accept -rw------- 1 root root 4 Jun 16 18:43 saslauthd.pid also my saslauthd runs like this: /usr/sbin/saslauthd -a ldap -r -m /var/run/saslauthd -n 5 You should be able to test if it is an access issue by running openldap as root for a test or check if the entire path to the mux is really accessible under whatever user your openldap runs as ( also try using for example: nc -U /run/saslauthd/mux under the relevant user to see if it really works ) Hope that helps and kind regards René On 06.08.22 15:13, Stéphane Veyret wrote: -- rene.gallati(a)ergon.ch T +41 44 268 83 10 Ergon Informatik AG, Merkurstrasse 43, CH-8032 Zürich www.ergon.ch smart people – smart software * * * * * * * * * * * * * * * * * * * * * * * * * DELIVERING TECHNOLOGY ADVANTAGE SINCE 1984