Hi,
obviously I don´t have an appropriate 'supportedSASLMechanisms:' entry. But after adding
supportedSASLMechanisms: PLAIN
to some ldap entries, the ldap_sasl_bin still does not work. Where I have to add these informations, and are they correct for a simple bind?
Thx,
Thilko
Thilko Richter thilko.richter@googlemail.com writes:
Hi,
obviously I don´t have an appropriate 'supportedSASLMechanisms:' entry. But after adding
supportedSASLMechanisms: PLAIN
to some ldap entries, the ldap_sasl_bin still does not work. Where I have to add these informations, and are they correct for a simple bind?
PLAIN is only enabled with a secured session, that is, TLS or ldapi.
-Dieter
So is there any way to do an simple bind over sasl without ssl/tls, just with the plaintext cred?
Thilko
Am 16.03.2010 um 08:18 schrieb Dieter Kluenter:
Thilko Richter thilko.richter@googlemail.com writes:
Hi,
obviously I don´t have an appropriate 'supportedSASLMechanisms:' entry. But after adding
supportedSASLMechanisms: PLAIN
to some ldap entries, the ldap_sasl_bin still does not work. Where I have to add these informations, and are they correct for a simple bind?
PLAIN is only enabled with a secured session, that is, TLS or ldapi.
-Dieter
-- Dieter Klünter | Systemberatung http://dkluenter.de GPG Key ID:8EF7B6C6 53°37'09,95"N 10°08'02,42"E
Thilko Richter thilko.richter@googlemail.com writes:
So is there any way to do an simple bind over sasl without ssl/tls, just with the plaintext cred?
Just use a challenge/response SASL Mechanism like DIGEST-MD5
-Dieter
Am 16.03.2010 um 08:18 schrieb Dieter Kluenter:
Thilko Richter thilko.richter@googlemail.com writes:
Hi,
obviously I don´t have an appropriate 'supportedSASLMechanisms:' entry. But after adding
supportedSASLMechanisms: PLAIN
to some ldap entries, the ldap_sasl_bin still does not work. Where I have to add these informations, and are they correct for a simple bind?
PLAIN is only enabled with a secured session, that is, TLS or ldapi.
-Dieter
-- Dieter Klünter | Systemberatung http://dkluenter.de GPG Key ID:8EF7B6C6 53°37'09,95"N 10°08'02,42"E
openldap-technical@openldap.org
-
Dieter Kluenter -
Thilko Richter