My scenario is relatively simple. The user authentication and LDAP directory for our local application is managed on corporate servers for which we lack administrative rights. We wish to maintain a local view of the LDAP directory for the information that our local application requires, but not alter the user authentication on the corporate servers.
Tim
On Thu, Jan 21, 2016 at 6:21 PM, Sergio NNX sfhacker@hotmail.com wrote:
I am new at LDAP , that is obvious I guess. But, I've been around Unix for 30 years.
Are we still having issues? We might be able to assist you if you describe your set up and your goal in more detail.
Cheers,
Ser.
Date: Thu, 21 Jan 2016 14:31:28 -0600 From: dwhite@cafedemocracy.org To: timothy.g.keith@gmail.com Subject: Re: pass-through authentication CC: dwhite@cafedemocracy.org; openldap-technical@openldap.org
You can view your config with:
slapcat -n0
And verify that object exists.
If you're receiving this error due to an ACL problem, verify you have the proper configuration in place to authenticate as the rootdn using sasl/external. See the slapd-config manpage, and see section 15.2 (and in particular 15.2.5) of the Administrator's guide, and reference your OS/distro documentation.
On 01/21/16 12:35 -0600, Timothy Keith wrote:
I commented the mech_list in slapd.conf
The ldapsearch result is now No such object
ldapsearch -LLLQY EXTERNAL -H ldapi:/// -b cn=config "(|(cn=config)(olcDatabase={1}hdb))" No such object (32)
On Fri, Jan 8, 2016 at 2:34 PM, Dan White dwhite@cafedemocracy.org wrote:
On 01/07/16 17:24 -0600, Timothy Keith wrote:
ldapsearch -LLLQY EXTERNAL -H ldapi:/// -b cn=config "(|(cn=config)(olcDatabase={1}hdb))" ldap_sasl_interactive_bind_s: Authentication method not supported (7) additional info: SASL(-4): no mechanism available:
I'm missing some context here. Most likely you have a mech_list hard coded in your slapd.conf sasl, which does not include the external mech.
There must be some issue which the email server/system. The same email content keeps showing up/bouncing!
Have you run some tests (apart from the simple ones we already know)? Have you sought assistance from your colleagues? Have you read some tutorials (apart from the only one we know about)?
We sent you some examples and test cases a few weeks ago. Some list users have given you useful advice.
My scenario is relatively simple.
Simple but really complex to solve. It is taking a long time!
You lost me here. I don't know what else to do to help you.
openldap-technical@openldap.org
-
Sergio NNX -
Timothy Keith