[Date Prev][Date Next] [Chronological] [Thread] [Top]

Re: proxy control does not verify existance of sasl-regex resulting dn (ITS#2965)



> Full_Name: Igor Brezac
> Version: OPENLDAP_REL_ENG_2_1
> OS: Solaris 9
> URL: ftp://ftp.openldap.org/incoming/
> Submission from: (NULL) (209.170.142.3)
>
>
> Consider the following example:
>
> $ ldapwhoami -U igor -e '!authzid=u:adfasd'
> SASL/DIGEST-MD5 authentication started
> Please enter your password:
> SASL username: igor
> SASL SSF: 128
> SASL installing layers
> dn:cn=adfasd,ou=people,o=pb
>
> Where cn=adfasd,ou=people,o=pb does not exist and adfasd is a not a
> valid id.

how did you set the sasl-authz-policy
and what's the saslAuthzTo in "igor"'s
entry?

p.

-- 
Pierangelo Masarati
mailto:pierangelo.masarati@sys-net.it