2014-02-03 Jarbas Peixoto Júnior <[email protected]>:

> I have two ldap servers .
> The first is an Ubuntu 04.12 with the package:
>
> ==================================================
> dpkg - l | grep slap
> ii slapd OpenLDAP 2.4.28 - 1.1ubuntu4.4 server ( slapd )
>  ==================================================
>
> In this server I get an EXTERNAL as supportedSASLMechanisms .
>
> ==================================================
> ldapsearch - x - H ldaps :/ / 10.XXX - b " " - LLL- s base
> supportedSASLMechanisms
> dn :
> supportedSASLMechanisms : DIGEST - MD5
> supportedSASLMechanisms : EXTERNAL
> supportedSASLMechanisms : NTLM
> supportedSASLMechanisms : CRAM - MD5
> supportedSASLMechanisms : PLAIN
> supportedSASLMechanisms : LOGIN
> ==================================================
>
> The second is a Debian with the package:
>
> ==================================================
> dpkg - l | grep openldap
> ii ltb openldap - amd64 2.4.39-1 OpenLDAP server with addons from the LDAP
> Tool Box project
> ii openldap - ltb - check module check_password amd64 2.4.39-1 password
> for password policy
> ii openldap - ltb -contrib - amd64 2.4.39-1 overlays contributed to
> OpenLDAP Overlays
> ==================================================
>
> In this server I get a NO EXTERNAL as supportedSASLMechanisms .
> ==================================================
> ldapsearch - x - H ldaps :/ / 10.YYY - b " " - LLL- s base
> supportedSASLMechanisms
> dn :
> supportedSASLMechanisms : DIGEST - MD5
> supportedSASLMechanisms : CRAM - MD5
> supportedSASLMechanisms : NTLM
> supportedSASLMechanisms : PLAIN
> supportedSASLMechanisms : LOGIN
> ==================================================
>
> Anyone succeeded with this "openldap-tlb" package do an authentication
> with digital certificate?
>


Seems you need to have a valid SSL/TLS configuration in order to have this
mechanism activated, see this post:
http://www.openldap.org/lists/openldap-software/200501/msg00348.html

Nothing to do in compilation procedure.


Clément.
_______________________________________________
ltb-users mailing list
[email protected]
http://lists.ltb-project.org/listinfo/ltb-users

Reply via email to