[Fwd: Re: basic sasl problem]

[Kuba Leszewski <k.leszewski@ce3.pl>]

Derek Simkowiak wrote:

Thanks for a reply but :

> > What do I put as rootdn ?
> >    
>
> 	Whatever you want.
>  
>
>  
>
> > Do I have to specify rootpw in slapd.conf.
> >    
>
> 	Only if you want to use the root dn to bind with.
>  
yes, exactly
I want to use rootdn to bind with
And I want rootdn data (uid, password or whatever) to be stored in sasldb

>  
>
> > What file should I create in /usr/lib/sasl ?
> >    
>
> 	Depends on the service authenticating with SASL.  It could be
> "smtp", or "imap" (I think)... you'll need to look up the correct file
> names.
>  
I know
But what file name should I use for OpenLDAP
ldap.conf
slapd.conf
?

>  
>
> > What users and realms should I add to sasldb ?
> >    
>
> 	If you're authenticating against LDAP I'd recommend using PAM and
> then configure PAM to authenticated against LDAP.  Then you'll be able to
> do cool things like ssh in, even though there is only an entry in your
> LDAP database and not in your password file.
>  
I'll do that as soon as any configuration with SASL starts working.
I know I can use pwcheck_method: pam in SASL,
and then use pam_ldap .

But so far I'd like to keep usernames and passwords in sasldb.

But I can't make it work,



Kuba