Re: OpenLDAP session authentication

2010-10-07 Thread Marc Patermann
Erik, Erik Lotspeich schrieb am 05.10.2010 22:04 Uhr: I have two questions/concerns: 1. If I leave the -Y plain option off of the argument list to ldapsearch, I get Invalid credentials: As far as I know from other SASL using software (like Postfix), the client always chooses the securest

Re: OpenLDAP session authentication

2010-10-06 Thread Erik Lotspeich
Hi Dan, A work around is to create a '.ldaprc' file in your home directory with the contents: SASL_MECH PLAIN This change has no effect... I am running 2.4.23 that I built from source. Both ldapsearch and ldapwhoami are linked against libsasl2. If there's some configuration that I'm

Re: OpenLDAP session authentication

2010-10-05 Thread Erik Lotspeich
Hi Dan, Thanks so much for your help. I'm getting closer. The ldapwhoami seems to work now. e...@starfish:~/ldif$ ldapwhoami -U erik -H ldaps://localhost/ SASL/PLAIN authentication started Please enter your password: SASL username: erik SASL SSF: 0 dn:uid=erik,cn=plain,cn=auth

Re: OpenLDAP session authentication

2010-10-05 Thread Dan White
On 05/10/10 15:04 -0500, Erik Lotspeich wrote: Hi Dan, Thanks so much for your help. I'm getting closer. The ldapwhoami seems to work now. e...@starfish:~/ldif$ ldapwhoami -U erik -H ldaps://localhost/ SASL/PLAIN authentication started Please enter your password: SASL username: erik SASL

Re: OpenLDAP session authentication

2010-10-02 Thread Dan White
On 29/09/10 10:19 -0500, Erik Lotspeich wrote: Hi Dan, I hope that I don't mind if I ask a follow-up question: r...@starfish:/usr/local/etc/openldap# testsaslauthd -u erik -p XXX -s slapd 0: OK Success. That works, but when I run ldapwhami, it doesn't: r...@starfish:/usr/local/etc/openldap#

OpenLDAP session authentication

2010-09-23 Thread Erik Lotspeich
Hi, I have looked around for the answer to this question and the solution wasn't obvious to me... I have an OpenLDAP installation that I use as an addressbook. I do not use OpenLDAP for authentication on my network. I am using it on an internal network with anonymous read-only access. I would

Re: OpenLDAP session authentication

2010-09-23 Thread Dan White
On 23/09/10 12:27 -0500, Erik Lotspeich wrote: I have an OpenLDAP installation that I use as an addressbook. I do not use OpenLDAP for authentication on my network. I am using it on an internal network with anonymous read-only access. I would like to require user-level authentication and I