Re: Authenticate to ldap using Kerberos

2010-09-09 Thread Wouter van Marle
On Wed, 2010-09-08 at 23:40 -0700, Howard Chu wrote: Wouter van Marle wrote: On Wed, 2010-09-08 at 21:34 -0500, Dan White wrote: On 09/09/10 10:21 +0800, Wouter van Marle wrote: That requires pass-through authentication. I see. Well with the above instructions nothing seems to have

Re: Authenticate to ldap using Kerberos

2010-09-09 Thread Wouter van Marle
On Thu, 2010-09-09 at 10:43 +0200, Dieter Kluenter wrote: Wouter van Marle wou...@squirrel-systems.com writes: On Wed, 2010-09-08 at 23:40 -0700, Howard Chu wrote: Wouter van Marle wrote: On Wed, 2010-09-08 at 21:34 -0500, Dan White wrote: On 09/09/10 10:21 +0800, Wouter van Marle

Re: Authenticate to ldap using Kerberos

2010-09-09 Thread Wouter van Marle
On 9 Sep 10, at 21:47, Dan White wrote: On 09/09/10 12:47 +0800, Wouter van Marle wrote: Adding user `openldap' to group `sasl' ... Adding user openldap to group sasl Done. (Did you restart slapd?) I don't remember... restarted it many times in the process :) I'm not used to need

Re: Authenticate to ldap using Kerberos

2010-09-09 Thread Wouter van Marle
is going to be tls, which for some reason also refuses to work for me :( Wouter. On Thu, 2010-09-09 at 19:41 +0200, Dieter Kluenter wrote: Wouter van Marle wou...@squirrel-systems.com writes: On 9 Sep 10, at 21:47, Dan White wrote: On 09/09/10 12:47 +0800, Wouter van Marle wrote

Re: Authenticate to ldap using Kerberos

2010-09-09 Thread Wouter van Marle
On Thu, 2010-09-09 at 23:02 -0500, Dan White wrote: On 09/09/10 20:05 -0700, Russ Allbery wrote: Wouter van Marle wou...@squirrel-systems.com writes: At this moment, I can connect to my ldap server from Evolution, authenticated. I have to enter a username and a password in my evo settings

Re: Authenticate to ldap using Kerberos

2010-09-08 Thread Wouter van Marle
To have slapd use saslauthd for authentication, you'll need to create the file /usr/lib/sasl2/slapd.conf, with these contents: pwcheck_method: saslauthd mech_list: plain login and optionally keytab: /etc/krb5.keytab (which is the standard location) Check. As per a previous trial I

Re: Authenticate to ldap using Kerberos

2010-09-08 Thread Wouter van Marle
Also see: http://www.cyrusimap.org/mediawiki/index.php/FAQ#Cyrus_SASL_Questions I followed those steps, finding out that the client didn't have the sasl gssapi module installed (apparently necessary?! I guessed the authentication is done by slapd on the server?). All other tests mentioned

Re: Authenticate to ldap using Kerberos

2010-09-08 Thread Wouter van Marle
On Wed, 2010-09-08 at 23:38 -0500, Dan White wrote: On 09/09/10 12:17 +0800, Wouter van Marle wrote: Anyway I have changed my userPassword field (using GQ) to {sasl}wou...@squirrel It still doesn't work of course. Also not when I set it to {SASL}wouter In syslog I found the following error