From: Igor Brezac (no email)
Date: Thu Mar 09 2006 - 10:27:43 EST
On Thu, 9 Mar 2006, Aleksandar Milivojevic wrote:
> Quoting Igor Brezac <>:
>
>> You must not have the latest version of cyrus sasl.
>
> Well, I have Cyrus SASL 2.1.19-5.EL4 RPM (RHEL4/CentOS4). Is it recent
> enough or I need to go more cutting edge than that? If not recent enough,
> would updating with 2.1.20-5 from Fedora Core 4 or 2.1.21-10 from Fedora
> rawhide be good enough?
2.1.21. I build things by hand, so I cannot comment on rpms.
> BTW, I compiled and installed the module from openldap contrib directory.
Which version on openldap?
> However, it seems to simply connect and then disconnect from my LDAP server,
> without attempting to do anything (both slapd.log and tcpdump simply show it
> connecting and issuing unbind right away). I've attempted using hole bunch
> of options, with anonymous bind and also using username. To no avail.
> Basically something like this:
>
> sasl_pwcheck_method: auxprop
> sasl_auxprop_plugin: ldapdb
> sasl_ldapdb_uri: ldap://ldap.foobar.com/
> sasl_ldap_base: ou=people,dc=foobar,dc=com
> sasl_ldap_filter: (uid=%u)
> sasl_ldap_sasl: 0
> sasl_ldap_tls_check_peer: 0
> sasl_ldap_version: 3
> # Try with and without sasl_ldapdb_mech
> #sasl_ldapdb_mech: PLAIN LOGIN
> # Try with and withoug bind_dn and password options
> sasl_ldap_bind_dn: uid=foobar,ou=people,dc=foobar,dc=com
> sasl_ldap_password: <some password>
All of these are saslauthd options and they have no effect in imapd.conf.
Please read options.html from cyrus-sasl 2.1.21
-- Igor ---- Cyrus Home Page: http://asg.web.cmu.edu/cyrus Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html
|
|
|