Re: Error - not compiled with SASL support

2012-02-15 Thread Howard Chu
Dieter Klünter wrote: Am Wed, 15 Feb 2012 10:19:10 +0530 schrieb Gaurav Gugnanigugnanigau...@gmail.com: Hello All, I'm *trying to implement SASL on the openldap of version 2.4.26.* First we install the openldap and then we install the necessary packages of cyrus-sasl. *Packages of

Re: Error - not compiled with SASL support

2012-02-15 Thread Gaurav Gugnani
Hello Howard, Thks for your support. I installed open ldap from source. So, *the crux is:* Q First i need to install the cyrus-sasl package and then i need to install the open-ldap with sasl option?? Plz confirm if my understanding is correct? Now, my scenario is this: In production open-ldap

authentification issue with clear text password

2012-02-15 Thread Szilard Gyorgy
HI Can anybody help me with the next issue ? ldapcompare -D uid=testuser,ou=Users,dc=domain,dc=net -w test uid=testuser,ou=Users,dc=domain,dc=net -v userPassword:test ldap_initialize( DEFAULT ) DN:uid=testuser,ou=Users,dc=domain,dc=net, attr:userPassword, value:test Compare Result:

Re: Error - not compiled with SASL support

2012-02-15 Thread anax
Hoi Gaurav if you did a vanilla install from a distro, you may be as lucky as to find a package in this distro (such as openldap-sasl or similar), which converts your LDAP server into an LDAP server, which is SASL capable. If there is no such package, there is no way around recompilation of the

Re: authentification issue with clear text password

2012-02-15 Thread anax
Hi Szilard your PW is SSHA encoded: base64 -d e1NTSEF9L0NFMERQNTVtOU82T09HK1AzQVdNZG9nU2x6Z0FwTGw= {SSHA}/CE0DP55m9O6OOG+P3AWMdogSlzgApLl SSHA encode the value you wanna compare and then compare it. suomi On 02/15/2012 12:38 PM, Szilard Gyorgy wrote: HI Can anybody help me with the next

RE: authentification issue with clear text password

2012-02-15 Thread Szilard Gyorgy
HI Suomi Yes, but I need all this for my Cisco router where I can't do any pre encryption - the password is sent for compaction in clear text so I need to make that compare to return true if the password is correct. Can I setup ldap to store the password in different format ? Best, Szilard

Re: authentification issue with clear text password

2012-02-15 Thread Hallvard B Furuseth
On Wed, 15 Feb 2012 13:38:17 +0200, Szilard Gyorgy szil...@gyorgy.net wrote: ldapcompare -D uid=testuser,ou=Users,dc=domain,dc=net -w test uid=testuser,ou=Users,dc=domain,dc=net -v userPassword:test Why are you using compare at all? The server already checked the password when it accepted

RE: authentification issue with clear text password

2012-02-15 Thread Szilard Gyorgy
Hi Hallvard I use the compare tool just for testing The problem is when I try to login to my Cisco router (using ldap) I got compare false error message. After that I tested the same password with this tool and I got the same result. If I give the same password what i used to login why not

RE: authentification issue with clear text password

2012-02-15 Thread Hallvard B Furuseth
On Wed, 15 Feb 2012 16:35:38 +0200, Szilard Gyorgy wrote: Hi Hallvard I use the compare tool just for testing The problem is when I try to login to my Cisco router (using ldap) I got compare false error message. After that I tested the same password with this tool and I got the same result.

problems populating hdb

2012-02-15 Thread stefano
Hi. i'm installing a ldap server on debian squeeze server. my goal is to assign to every users of different groups a username and password. my slapd.conf is: include /etc/ldap/schema/core.schema include /etc/ldap/schema/cosine.schema include /etc/ldap/schema/nis.schema include

Re: authentification issue with clear text password

2012-02-15 Thread Buchan Milne
On Wednesday, 15 February 2012 15:21:53 Szilard Gyorgy wrote: HI Suomi Yes, but I need all this for my Cisco router AFAIK, Cisco routers don't support LDAP authentication, but instead RADIUS (e.g. for VPN authentication), TACACS+ and Kerberos (e.g. administrative acces). Maybe you can