Re: OpenLDAP static configuration

2014-02-08 Thread Jarbas Peixoto Júnior
2014-02-07 8:45 GMT-03:00 Ali Gholami ghol...@kth.se: Hi list, I've an Ubuntu 12.04 and I'd like to install an static configraution using slapd.conf. I've created a slapd.conf under /etc/ldap where is the default directory to install OpenLDAP. But when I start my service through sudo service

SASL DIGEST-MD5 works but PLAIN/LOGIN fails

2014-02-08 Thread Michael Ströder
HI! I'd like let users authenticate via SASL/PLAIN or SASL/LOGIN so they do not have to deal with full bind-DNs, my client does not have to search the user and to avoid slapo-rwm. Yes, the connection is protected with TLS. Later it has to work with hashed userPassword values. It should be

Re: Have you seen this FUD - IT pros suffer OpenLDAP configuration headaches ?

2014-02-08 Thread Howard Chu
harry.j...@arcor.de wrote: #!/bin/sed -rf # Author: Harry Jede # produce human readable but still machine parseable # olcAccess lines and removes the ordering numbers in {} # because humans don't need them, really. Nice formatting, but just a note - the ordering prefixes are there to allow

Re: SASL DIGEST-MD5 works but PLAIN/LOGIN fails

2014-02-08 Thread Howard Chu
Michael Ströder wrote: The trace shows for PLAIN or LOGIN (running slapd -d config,stats,stats2,acl,args,trace): SASL [conn=1002] Error: unknown password verifier(s) slapd My /usr/lib64/sasl.conf contains: snip pwcheck_method: slapd

Re: SASL DIGEST-MD5 works but PLAIN/LOGIN fails

2014-02-08 Thread Michael Ströder
Howard Chu wrote: Michael Ströder wrote: The trace shows for PLAIN or LOGIN (running slapd -d config,stats,stats2,acl,args,trace): SASL [conn=1002] Error: unknown password verifier(s) slapd My /usr/lib64/sasl.conf contains: snip

Re: Have you seen this FUD - IT pros suffer OpenLDAP configuration headaches ?

2014-02-08 Thread harry . jede
Howard Chu wrote: harry.j...@arcor.de wrote: #!/bin/sed -rf # Author: Harry Jede # produce human readable but still machine parseable # olcAccess lines and removes the ordering numbers in {} # because humans don't need them, really. Nice formatting, but just a note - the ordering

rwm-rewriteMap for bindDN and slapo-ppolicy

2014-02-08 Thread Michael Ströder
HI! I'm trying to use slapo-rwm to simplify bind-DNs used. I'm also using slapo-lastbind to record the last simple bind timestamp and slapo-ppolicy also for recording pwdFailureTime. Using latest RE24 of course. Something like this defined *within* the database section: --

Re: rwm-rewriteMap for bindDN and slapo-ppolicy

2014-02-08 Thread Michael Ströder
Michael Ströder wrote: I'm trying to use slapo-rwm to simplify bind-DNs used. I'm also using slapo-lastbind to record the last simple bind timestamp and slapo-ppolicy also for recording pwdFailureTime. Using latest RE24 of course. Something like this defined *within* the database section:

Re: SASL DIGEST-MD5 works but PLAIN/LOGIN fails

2014-02-08 Thread Dan White
On 02/08/14 11:45 +0100, Michael Ströder wrote: I'd like let users authenticate via SASL/PLAIN or SASL/LOGIN so they do not have to deal with full bind-DNs, my client does not have to search the user and to avoid slapo-rwm. Yes, the connection is protected with TLS. Later it has to work with

Re: SASL DIGEST-MD5 works but PLAIN/LOGIN fails

2014-02-08 Thread Dieter Klünter
Hallo Michael, Am Sat, 08 Feb 2014 11:45:52 +0100 schrieb Michael Ströder mich...@stroeder.com: HI! I'd like let users authenticate via SASL/PLAIN or SASL/LOGIN so they do not have to deal with full bind-DNs, my client does not have to search the user and to avoid slapo-rwm. Yes, the

Re: SASL DIGEST-MD5 works but PLAIN/LOGIN fails

2014-02-08 Thread Michael Ströder
Dieter Klünter wrote: Am Sat, 08 Feb 2014 11:45:52 +0100 schrieb Michael Ströder mich...@stroeder.com: My /usr/lib64/sasl.conf contains: snip pwcheck_method: slapd mech_list: plain login digest-md5 external