Let's say I have the following (I am really using slapd.d, but you get
the idea):

authz-regexp: "uid=ldap/slave.domain.com,cn=gssapi,cn=auth"
"cn=admin,dc=domain,dc=com"

How does that work? From what I understand it would map
"uid=ldap/slave.domain.com,cn=gssapi,cn=auth" to
"cn=admin,dc=domain,dc=com". Would I be able to see that happening in
the log file?  If so, what is going on in these lines here:

Sep 24 12:06:54 dir slapd[24810]: SASL proxy authorize [conn=1003]:
authcid="ldap/slave.domain....@domain.com"
authzid="ldap/slave.domain....@domain.com"
Sep 24 12:06:54 dir slapd[24810]: conn=1003 op=2 BIND
authcid="ldap/slave.domain....@domain.com"
authzid="ldap/slave.domain....@domain.com"
________________________________________________
Kerberos mailing list           Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos

Reply via email to