SASL DIGESTMD5 and openLdap error

[Geissbühler Johannes <johannes.geissbuehler@elca.ch>]

Hi all

I'm getting following error when I try to use the SASL authentication ( I'm
testing with ldapsearch)


base_candidates: base: "uid=hannes2,dc=elcard" (0x00000013)
=> test_filter
    PRESENT
=> access_allowed: auth access to "uid=hannes2,dc=elcard" "objectClass"
requested
=> acl_get: [1] attr objectClass
=> acl_mask: access to entry "uid=hannes2,dc=elcard", attr "objectClass"
requested
=> acl_mask: to all values by "", (=n)
<= check a_dn_pat: *
<= acl_mask: [1] applying write(=wrscx) (stop)
<= acl_mask: [1] mask: write(=wrscx)
=> access_allowed: auth access granted by write(=wrscx)
<= test_filter 6
=> access_allowed: auth access to "uid=hannes2,dc=elcard" "userPassword"
requested
=> acl_get: [1] attr userPassword
=> acl_mask: access to entry "uid=hannes2,dc=elcard", attr "userPassword"
requested
=> acl_mask: to all values by "", (=n)
<= check a_dn_pat: *
<= acl_mask: [1] applying write(=wrscx) (stop)
<= acl_mask: [1] mask: write(=wrscx)
=> access_allowed: auth access granted by write(=wrscx)
slap_auxprop: str2ad(cmusaslsecretDIGEST-MD5): attribute type undefined
send_ldap_result: conn=4 op=0 p=3
send_ldap_result: err=0 matched="" text=""
SASL Canonicalize [conn=4]: authzid="hannes2"
SASL [conn=4] Failure: client response doesn't match what we generated
send_ldap_result: conn=4 op=1 p=3
send_ldap_result: err=49 matched="" text="SASL(-13): authentication failure:
client response doesn't match what we generated"

Has anyone an Idea what goes wrong ? Thanks for your Help

Johannes