Re: [Fedora-directory-users] How to make anonymous SASL work?

devel - Fashion Content
2006-09-18T17:19:29Z

I have the mailserver and the directory on the same server.

I have installed OpenLDAP client & libs and cyrus sasl.
Fedora DS ldapsearch is not on the path.
The Fedora DS now stores userPasswords as plaintext.

saslauthd run with: MECH=ldap, FLAGS=-c

saslauthd.conf:

ldap_servers: ldap://127.0.0.1
ldap_search_base: ou=People,dc=fashioncontent,dc=com
ldap_bind_dn: cn=Directory Manager,dc=fashioncontent,dc=com
ldap_bind_pw: secret

ldap_filter: (&(objectClass=inetorgperson)(uid=%u))
ldap_use_sasl: no
ldap_auth_method: bind
ldap_version: 3
ldap_debug: 3
ldap_verbose: on
log_level: 255


OpenLDAP ldapsearch: Shows userPassword results hashed, but otherwise shows
the users I look up
OpenLDAP ldapsearch userPassword=secret: Success
Fedora ldapsearch: Fails to find anything
testsaslauthd -u devel -p secret: Fails to find anything, error code 32 I
think

I haven''t figured out how to make saslauthd report the ldap queries, so
I
know very little of what happens and the Fedora logs
don''t appear to help much more.

Henrik