Let's say I have the following (I am really using slapd.d, but you get the idea):
authz-regexp: "uid=ldap/slave.domain.com,cn=gssapi,cn=auth" "cn=admin,dc=domain,dc=com" How does that work? From what I understand it would map "uid=ldap/slave.domain.com,cn=gssapi,cn=auth" to "cn=admin,dc=domain,dc=com". Would I be able to see that happening in the log file? If so, what is going on in these lines here: Sep 24 12:06:54 dir slapd[24810]: SASL proxy authorize [conn=1003]: authcid="ldap/slave.domain....@domain.com" authzid="ldap/slave.domain....@domain.com" Sep 24 12:06:54 dir slapd[24810]: conn=1003 op=2 BIND authcid="ldap/slave.domain....@domain.com" authzid="ldap/slave.domain....@domain.com" ________________________________________________ Kerberos mailing list Kerberos@mit.edu https://mailman.mit.edu/mailman/listinfo/kerberos