Re: SASL DIGEST-MD5 works but PLAIN/LOGIN fails

2014-02-09 Thread Howard Chu
Philip Guenther wrote: On Sun, 9 Feb 2014, Dieter Klünter wrote: Am Sat, 08 Feb 2014 23:18:22 +0100 schrieb Michael Ströder : Dieter Klünter wrote: Am Sat, 08 Feb 2014 11:45:52 +0100 schrieb Michael Ströder : [...] Yes, got that working in the meantime. But unfortunately this only works wi

Re: SASL DIGEST-MD5 works but PLAIN/LOGIN fails

2014-02-09 Thread Philip Guenther
On Sun, 9 Feb 2014, Dieter Klünter wrote: > Am Sat, 08 Feb 2014 23:18:22 +0100 > schrieb Michael Ströder : > > > Dieter Klünter wrote: > > > Am Sat, 08 Feb 2014 11:45:52 +0100 > > > schrieb Michael Ströder : > [...] > > > > Yes, got that working in the meantime. But unfortunately this only > > wo

Re: SASL DIGEST-MD5 works but PLAIN/LOGIN fails

2014-02-09 Thread Dieter Klünter
Am Sat, 08 Feb 2014 23:18:22 +0100 schrieb Michael Ströder : > Dieter Klünter wrote: > > Am Sat, 08 Feb 2014 11:45:52 +0100 > > schrieb Michael Ströder : [...] > > Yes, got that working in the meantime. But unfortunately this only > works with clear-text userPassword values. That's definitely not

Re: SASL DIGEST-MD5 works but PLAIN/LOGIN fails

2014-02-08 Thread Michael Ströder
Dieter Klünter wrote: > Am Sat, 08 Feb 2014 11:45:52 +0100 > schrieb Michael Ströder : > >> My /usr/lib64/sasl.conf contains: >> snip >> pwcheck_method: slapd >> mech_list: plain login digest-md5 external >> sni

Re: SASL DIGEST-MD5 works but PLAIN/LOGIN fails

2014-02-08 Thread Dieter Klünter
Hallo Michael, Am Sat, 08 Feb 2014 11:45:52 +0100 schrieb Michael Ströder : > HI! > > I'd like let users authenticate via SASL/PLAIN or SASL/LOGIN so they > do not have to deal with full bind-DNs, my client does not have to > search the user and to avoid slapo-rwm. > > Yes, the connection is pr

Re: SASL DIGEST-MD5 works but PLAIN/LOGIN fails

2014-02-08 Thread Dan White
On 02/08/14 11:45 +0100, Michael Ströder wrote: I'd like let users authenticate via SASL/PLAIN or SASL/LOGIN so they do not have to deal with full bind-DNs, my client does not have to search the user and to avoid slapo-rwm. Yes, the connection is protected with TLS. Later it has to work with has

Re: SASL DIGEST-MD5 works but PLAIN/LOGIN fails

2014-02-08 Thread Michael Ströder
Howard Chu wrote: > Michael Ströder wrote: >> The trace shows for PLAIN or LOGIN >> (running slapd -d config,stats,stats2,acl,args,trace): >> >> SASL [conn=1002] Error: unknown password verifier(s) slapd >> >> My /usr/lib64/sasl.conf contains: >> snip --

Re: SASL DIGEST-MD5 works but PLAIN/LOGIN fails

2014-02-08 Thread Howard Chu
Michael Ströder wrote: The trace shows for PLAIN or LOGIN (running slapd -d config,stats,stats2,acl,args,trace): SASL [conn=1002] Error: unknown password verifier(s) slapd My /usr/lib64/sasl.conf contains: snip pwcheck_method: slapd mech

SASL DIGEST-MD5 works but PLAIN/LOGIN fails

2014-02-08 Thread Michael Ströder
HI! I'd like let users authenticate via SASL/PLAIN or SASL/LOGIN so they do not have to deal with full bind-DNs, my client does not have to search the user and to avoid slapo-rwm. Yes, the connection is protected with TLS. Later it has to work with hashed userPassword values. It should be feasibl