Re: Authentication of LDAP-Users via pam

["Jacques Landru" <landru@enic.fr>]

Hi,

> >But a 'ldapsearch -d 2' shows as supportedSASLMechanisms only
'DIGEST-MD5' and 'CRAM-MD5'.
> >What am i doing possibly wrong?
>
It was the same for me. But now its works, after two or three days fighting
with the different environments and parameters to make it work,
I wrote this summary as a memorenda pages.

http://www.enic.fr/people/landru/lobster/openldap/OpenLDAP-authenticating-wi
th-PAM.txt

Hope this will help

Jacques Landru



----- Original Message -----
From: "Thomas Bullinger (QDD)" <Thomas.Bullinger@edd.ericsson.se>
To: "'openldap-software@openldap.org'" <openldap-software@OpenLDAP.org>
Sent: Thursday, February 08, 2001 8:00 PM
Subject: Authentication of LDAP-Users via pam


>
>
> >The story continues. cyrus-sasl was now compiled from the sources
> >with '--enable-plain' and '--enable-login'.
>
> >But a 'ldapsearch -d 2' shows as supportedSASLMechanisms only
'DIGEST-MD5' and 'CRAM-MD5'.
> >What am i doing possibly wrong?
>
> Thanks to help from the List PLAIN and LOGIN are now presented by the
server. Minor problems
> with the name-resolution that leaded to "Local Error" are fixed also (If i
ever get this to work
> and understand why i will write a HOWTO).
>
> Next Problem: Despite presenting me 'PLAIN' and 'LOGIN' as
supportedSASLMechanisms, a
>
> ldapsearch -d 3 -U uid -Y PLAIN
>
> comes up with: 'ldap_sasl_interactive_bind_s: Unknown authentication
method.' A
>
> ldapsearch -d 3 -U uid -Y DIGEST-MD5
>
> against sasldb works like a charm. Has anyone seen this before and knows a
remedy?
>
> tbu (going desperate)
>