search for: identikey

...use DIGEST-MD5, but that's what I stuck with for now. If samba4 could support DIGEST-MD5 that would be great. Thanks, Arthur On 07/10/2015 03:29 PM, Andrew Bartlett wrote: > On Fri, 2015-07-10 at 11:45 -0500, Arthur Ramsey wrote: >> That's too bad, I was trying to get the Vasco Identikey server working >> with samba4 as a backend for FIPS 140-2 compliant OTP, which will only >> bind with DIGEST-MD5. I guess I will have to join a Windows 2008 R2 to >> the domain as a domain controller. > Very interesting. This is the first use of DIGEST-MD5 that I've come...

That's too bad, I was trying to get the Vasco Identikey server working with samba4 as a backend for FIPS 140-2 compliant OTP, which will only bind with DIGEST-MD5. I guess I will have to join a Windows 2008 R2 to the domain as a domain controller. Thanks for clarifying, Arthur On 07/10/2015 04:38 AM, Andrew Bartlett wrote: > On Tue, 2015-07-07...

I've googled and I believe that SASL method DIGEST-MD5 is supported and I see it in the samba startup, but it doesn't work. ldapsearch -Y DIGEST-MD5 -h dc03.mediture.dom SASL/DIGEST-MD5 authentication started ldap_sasl_interactive_bind_s: Operations error (1) additional info: SASL:[DIGEST-MD5]: Failed to start authentication backend: NT_STATUS_INVALID_PARAMETER [root at dc03 ~]# samba