[Date Prev][Date Next] [Chronological] [Thread] [Top]

Re: MAC OS/X authentication against OpenLDAP 2.3

To: Francis Swasey <Frank.Swasey@uvm.edu>
Subject: Re: MAC OS/X authentication against OpenLDAP 2.3
From: Aaron Richton <richton@nbcs.rutgers.edu>
Date: Sat, 11 Feb 2006 18:43:04 -0500 (EST)
Cc: OpenLDAP software list <openldap-software@OpenLDAP.org>
In-reply-to: <43ED21A9.3040606@uvm.edu>
References: <43ED21A9.3040606@uvm.edu>

If you're expecting the Macs to do simple binds, they're probably not.
(They probably did in earlier 2.3/2.2, but that was a bug in slapd.)
Either configure OpenLDAP to accept SASL binds, recompile --without-sasl,
or fake it with

access to dn.exact="" attrs=supportedSASLMechanisms by * none

any one of which will force DSLDAPv3 to downgrade to a simple bind.

On Fri, 10 Feb 2006, Francis Swasey wrote:

> I have just gotten clobbered because I completed upgrading the last of
> the ldap servers to 2.3.19 today and immediately all the Mac's on campus
> were unable to authenticate....
>
> Anyone else experience problems with Mac's authenticating against
> OpenLDAP 2.3 when they were able to with OpenLDAP 2.2?

Follow-Ups:
- Re: MAC OS/X authentication against OpenLDAP 2.3 (Resolved)
  - From: Francis Swasey <Frank.Swasey@uvm.edu>

References:
- MAC OS/X authentication against OpenLDAP 2.3
  - From: Francis Swasey <Frank.Swasey@uvm.edu>

Prev by Date: Re: MAC OS/X authentication against OpenLDAP 2.3
Next by Date: Re: MAC OS/X authentication against OpenLDAP 2.3
Index(es):
- Chronological
- Thread