Philip Guenther wrote:
On Sun, 9 Feb 2014, Dieter Klünter wrote:
Am Sat, 08 Feb 2014 23:18:22 +0100
schrieb Michael Ströder :
Dieter Klünter wrote:
Am Sat, 08 Feb 2014 11:45:52 +0100
schrieb Michael Ströder :
[...]
Yes, got that working in the meantime. But unfortunately this only
works wi
On Sun, 9 Feb 2014, Dieter Klünter wrote:
> Am Sat, 08 Feb 2014 23:18:22 +0100
> schrieb Michael Ströder :
>
> > Dieter Klünter wrote:
> > > Am Sat, 08 Feb 2014 11:45:52 +0100
> > > schrieb Michael Ströder :
> [...]
> >
> > Yes, got that working in the meantime. But unfortunately this only
> > wo
Am Sat, 08 Feb 2014 23:18:22 +0100
schrieb Michael Ströder :
> Dieter Klünter wrote:
> > Am Sat, 08 Feb 2014 11:45:52 +0100
> > schrieb Michael Ströder :
[...]
>
> Yes, got that working in the meantime. But unfortunately this only
> works with clear-text userPassword values. That's definitely not
Dieter Klünter wrote:
> Am Sat, 08 Feb 2014 11:45:52 +0100
> schrieb Michael Ströder :
>
>> My /usr/lib64/sasl.conf contains:
>> snip
>> pwcheck_method: slapd
>> mech_list: plain login digest-md5 external
>> sni
Hallo Michael,
Am Sat, 08 Feb 2014 11:45:52 +0100
schrieb Michael Ströder :
> HI!
>
> I'd like let users authenticate via SASL/PLAIN or SASL/LOGIN so they
> do not have to deal with full bind-DNs, my client does not have to
> search the user and to avoid slapo-rwm.
>
> Yes, the connection is pr
On 02/08/14 11:45 +0100, Michael Ströder wrote:
I'd like let users authenticate via SASL/PLAIN or SASL/LOGIN so they do not
have to deal with full bind-DNs, my client does not have to search the user
and to avoid slapo-rwm.
Yes, the connection is protected with TLS.
Later it has to work with has
Howard Chu wrote:
> Michael Ströder wrote:
>> The trace shows for PLAIN or LOGIN
>> (running slapd -d config,stats,stats2,acl,args,trace):
>>
>> SASL [conn=1002] Error: unknown password verifier(s) slapd
>>
>> My /usr/lib64/sasl.conf contains:
>> snip --
Michael Ströder wrote:
The trace shows for PLAIN or LOGIN
(running slapd -d config,stats,stats2,acl,args,trace):
SASL [conn=1002] Error: unknown password verifier(s) slapd
My /usr/lib64/sasl.conf contains:
snip
pwcheck_method: slapd
mech
HI!
I'd like let users authenticate via SASL/PLAIN or SASL/LOGIN so they do not
have to deal with full bind-DNs, my client does not have to search the user
and to avoid slapo-rwm.
Yes, the connection is protected with TLS.
Later it has to work with hashed userPassword values.
It should be feasibl