Re: proxy control does not verify existance of sasl-regex resulting dn (ITS#2965)

[igor@ipass.net]

On Thu, 12 Feb 2004, Pierangelo Masarati wrote:

>
> > Full_Name: Igor Brezac
> > Version: OPENLDAP_REL_ENG_2_1
> > OS: Solaris 9
> > URL: ftp://ftp.openldap.org/incoming/
> > Submission from: (NULL) (209.170.142.3)
> >
> >
> > Consider the following example:
> >
> > $ ldapwhoami -U igor -e '!authzid=u:adfasd'
> > SASL/DIGEST-MD5 authentication started
> > Please enter your password:
> > SASL username: igor
> > SASL SSF: 128
> > SASL installing layers
> > dn:cn=adfasd,ou=people,o=pb
> >
> > Where cn=adfasd,ou=people,o=pb does not exist and adfasd is a not a
> > valid id.
>
> how did you set the sasl-authz-policy
> and what's the saslAuthzTo in "igor"'s
> entry?
>

saslAuthzTo: cn=.*

-- 
Igor