Re: noob on slapd with sasl errors



-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Kaiser, Hans wrote:
Hello,

I am currently switching dapper to ldap authentication, but after only
few steps I have to give up...

I have configured my slapd.conf like it is presented here:
http://www.howtoforge.com/linux_ldap_authentication

I got stuck with the first ldapsearch command.
ldapsearch -D "cn=Manager,dc=domain,dc=com" -W
Enter LDAP Password:
SASL/DIGEST-MD5 authentication started
ldap_sasl_interactive_bind_s: Internal (implementation specific) error (80)
additional info: SASL(-13): user not found: no secret in database

and the log files tells me:
SASL [conn=1] Failure: no secret in database
conn=1 op=2 RESULT tag=97 err=80 text=SASL(-13): user not found: no
secret in database

Hope someone can help me....
I have no idea how sasl works and why it is needed here, or even more,
how to configure it.

regards


Try adding -x to your ldapsearch command to use simple authentication
instead of SASL, i.e;
ldapsearch -x -D "cn=Manager,dc=domain,dc=com" -W

- --
Jens Cedlind | jens@dataparty-mn,biz | GPG Key ID: 34B1E922


-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.2.2 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFFBl0r8zyaWjSx6SIRAnZlAJ0Y7YKKLOGT37pQUgAdbdo5nM8WywCgk3MG
XxpOQQDhP6tnH+/Hw8Xj4DU=
=B2Sf
-----END PGP SIGNATURE-----

--
ubuntu-users mailing list
ubuntu-users@xxxxxxxxxxxxxxxx
https://lists.ubuntu.com/mailman/listinfo/ubuntu-users



Relevant Pages

  • Re: Why Code Authentication At All?
    ... Sometimes, the customer wants forms authentication, ... > However, if you can use Windows auth, then by all means do so. ... you can check the Windows group ... > If you really do need to use S.DS to do LDAP authentication (need forms ...
    (microsoft.public.dotnet.framework.aspnet.security)
  • LDAP module on OSIS Cd
    ... I have installed Netscape Directory server 4.12 on trucluster 5.1A for ... System authentication. ... The product was packaged with the Open Sources Internet Solutions (OSIS) ... Is there any method to secure the LDAP authentication traffic in this ...
    (Tru64-UNIX-Managers)
  • Re: noob on slapd with sasl errors
    ... I am currently switching dapper to ldap authentication, ... I have no idea how sasl works and why it is needed here, or even more, ... Anyway is there a howto, which describes the configuration, which is ...
    (Ubuntu)
  • Re: Directory Binding and Search
    ... got it moving and found that no authentication is required in this case, ... Just don't know why the second foreach loop ... one last thing, I saw your reply to other thread on LDAP authentication, ... > You should not have to get the DirectoryEntry object to read the values. ...
    (microsoft.public.dotnet.framework.aspnet.security)
  • Re: Java NewsNet
    ... My recommendation is to start with RFC 3977. ... If you want server login authentication, then start with RFC 4643, which adds SASL authentication to NNTP. ...
    (comp.lang.java.programmer)