Re: invalid credentials (49) for normal user

2010-12-29 Thread Dieter Kluenter
Am Wed, 29 Dec 2010 14:52:39 + schrieb rui guidevelo...@gmail.com: Hi, After running slapd with -d 128 i have found lot of messages like this. Can somebody point me to standard acl for users, i want to authenticate for every user using ldap browser or c ldap api with

Re: Kerberos/GSSAPI issues

2010-12-29 Thread Brian Candler
On Wed, Dec 29, 2010 at 07:57:43AM +0100, Dieter Kluenter wrote: The default ssf of ldapi is 71, but you may change localSSF in slapd.conf(5). [...] Thank you, that is very clear. Having changed that, I can use EXTERNAL with minssf=112, but not GSSAPI. I find that if I set minssf=56 it's

Re: invalid credentials (49) for normal user

2010-12-29 Thread Dieter Kluenter
Am Wed, 29 Dec 2010 16:32:52 + schrieb rui guidevelo...@gmail.com: Hi, I have changed the slapd.conf acl settings accordingly. Also i have switched to bdb through these two commands slapcat -f /etc/openldap/slapd.conf -l dumps.ldif slapadd -l dumps.ldif Still no luck, can't bind

Re: Kerberos/GSSAPI issues

2010-12-29 Thread Brian Candler
On Tue, Dec 28, 2010 at 02:28:40PM -0800, Howard Chu wrote: (1) According to the documentation at http://www.openldap.org/doc/admin24/sasl.html#GSSAPI then the authentication DN should be uid=primary[/instance],cn=realm,cn=gssapi,cn=auth However, running slapd in debug mode I see the

Re: Kerberos/GSSAPI issues

2010-12-29 Thread Dieter Kluenter
Am Wed, 29 Dec 2010 16:50:17 + schrieb Brian Candler b.cand...@pobox.com: On Wed, Dec 29, 2010 at 07:57:43AM +0100, Dieter Kluenter wrote: The default ssf of ldapi is 71, but you may change localSSF in slapd.conf(5). [...] Thank you, that is very clear. Having changed that, I can

Re: Kerberos/GSSAPI issues

2010-12-29 Thread Howard Chu
Dieter Kluenter wrote: Am Wed, 29 Dec 2010 16:50:17 + schrieb Brian Candlerb.cand...@pobox.com: On Wed, Dec 29, 2010 at 07:57:43AM +0100, Dieter Kluenter wrote: The default ssf of ldapi is 71, but you may change localSSF in slapd.conf(5). [...] Thank you, that is very clear. Having