Re: SASL DIGEST-MD5 works but PLAIN/LOGIN fails

2014-02-09 Thread Dieter Klünter
Am Sat, 08 Feb 2014 23:18:22 +0100 schrieb Michael Ströder mich...@stroeder.com: Dieter Klünter wrote: Am Sat, 08 Feb 2014 11:45:52 +0100 schrieb Michael Ströder mich...@stroeder.com: [...] Yes, got that working in the meantime. But unfortunately this only works with clear-text

Re: SASL DIGEST-MD5 works but PLAIN/LOGIN fails

2014-02-09 Thread Philip Guenther
On Sun, 9 Feb 2014, Dieter Klünter wrote: Am Sat, 08 Feb 2014 23:18:22 +0100 schrieb Michael Ströder mich...@stroeder.com: Dieter Klünter wrote: Am Sat, 08 Feb 2014 11:45:52 +0100 schrieb Michael Ströder mich...@stroeder.com: [...] Yes, got that working in the meantime. But

Re: SASL DIGEST-MD5 works but PLAIN/LOGIN fails

2014-02-09 Thread Howard Chu
Philip Guenther wrote: On Sun, 9 Feb 2014, Dieter Klünter wrote: Am Sat, 08 Feb 2014 23:18:22 +0100 schrieb Michael Ströder mich...@stroeder.com: Dieter Klünter wrote: Am Sat, 08 Feb 2014 11:45:52 +0100 schrieb Michael Ströder mich...@stroeder.com: [...] Yes, got that working in the

SASL DIGEST-MD5 works but PLAIN/LOGIN fails

2014-02-08 Thread Michael Ströder
HI! I'd like let users authenticate via SASL/PLAIN or SASL/LOGIN so they do not have to deal with full bind-DNs, my client does not have to search the user and to avoid slapo-rwm. Yes, the connection is protected with TLS. Later it has to work with hashed userPassword values. It should be

Re: SASL DIGEST-MD5 works but PLAIN/LOGIN fails

2014-02-08 Thread Howard Chu
Michael Ströder wrote: The trace shows for PLAIN or LOGIN (running slapd -d config,stats,stats2,acl,args,trace): SASL [conn=1002] Error: unknown password verifier(s) slapd My /usr/lib64/sasl.conf contains: snip pwcheck_method: slapd

Re: SASL DIGEST-MD5 works but PLAIN/LOGIN fails

2014-02-08 Thread Michael Ströder
Howard Chu wrote: Michael Ströder wrote: The trace shows for PLAIN or LOGIN (running slapd -d config,stats,stats2,acl,args,trace): SASL [conn=1002] Error: unknown password verifier(s) slapd My /usr/lib64/sasl.conf contains: snip

Re: SASL DIGEST-MD5 works but PLAIN/LOGIN fails

2014-02-08 Thread Dan White
On 02/08/14 11:45 +0100, Michael Ströder wrote: I'd like let users authenticate via SASL/PLAIN or SASL/LOGIN so they do not have to deal with full bind-DNs, my client does not have to search the user and to avoid slapo-rwm. Yes, the connection is protected with TLS. Later it has to work with

Re: SASL DIGEST-MD5 works but PLAIN/LOGIN fails

2014-02-08 Thread Dieter Klünter
Hallo Michael, Am Sat, 08 Feb 2014 11:45:52 +0100 schrieb Michael Ströder mich...@stroeder.com: HI! I'd like let users authenticate via SASL/PLAIN or SASL/LOGIN so they do not have to deal with full bind-DNs, my client does not have to search the user and to avoid slapo-rwm. Yes, the

Re: SASL DIGEST-MD5 works but PLAIN/LOGIN fails

2014-02-08 Thread Michael Ströder
Dieter Klünter wrote: Am Sat, 08 Feb 2014 11:45:52 +0100 schrieb Michael Ströder mich...@stroeder.com: My /usr/lib64/sasl.conf contains: snip pwcheck_method: slapd mech_list: plain login digest-md5 external