ldapsearch -LLL -x -H ldap://1.2.3.4 -s "base" -b "" supportedSASLMechanisms

That ldapsearch returns : dn: supportedSASLMechanisms: PLAIN

I tried this as well :

ldapsearch -h localhost -Y digest-md5 -U my_userid -w my_password -v '(objectClass=*)' ldap_initialize( ldap://localhost ) SASL/DIGEST-MD5 authentication started ldap_sasl_interactive_bind_s: Authentication method not supported (7) additional info: SASL(-4): no mechanism available:

Tim

On Thu, Dec 31, 2015 at 9:51 AM, Timothy Keith timothy.g.keith@gmail.com wrote:

Dan, that ldapsearch returns : dn: supportedSASLMechanisms: PLAIN

On Wed, Dec 30, 2015 at 7:04 PM, Dan White dwhite@cafedemocracy.org wrote:

...

On 12/30/15 18:51 -0600, Timothy Keith wrote:

...

This is tail of the latest saslauthd debug output :

ldap_sasl_interactive_bind: user selected: DIGEST-MD5

res_errno: 7, res_error: <SASL(-4): no mechanism available: >,

...

res_matched: <> ldap_free_request (origid 1, msgid 1) ldap_int_sasl_bind: DIGEST-MD5 ldap_parse_sasl_bind_result ldap_parse_result ldap_msgfree ldap_err2string

Is DIGEST-MD5 available on your ldap server? Try:

ldapsearch -LLL -x -H ldap://1.2.3.4 -s "base" -b "" supportedSASLMechanisms Which should list the advertised sasl mechanisms.

Verify the digest-md5 mechanism is installed with saslpluginviewer/pluginviewer.

-- Dan White