[Date Prev][Date Next]
[Chronological]
[Thread]
[Top]
SASL authentication with open ldap
Dear Philip, Greg, Tony, Louis and the list,
Thanks for the guidance so far. I have got little success but still away
from my target.
here I'm describing every thing.
1> I have executed "saslpasswd2 admin" to create the user admin in the
sasldb2
2> "sasldblistusers2" shows as below
admin@linux.kolkatainfoservices.in: userPassword
3> now the command *ldapsearch -H ldaps://* when asks the password I
gave the admin password stored in sasldb2.
and now it is working.
4> I may be allowed to provide the log here
=======================================================
Mar 12 12:26:12 linux slapd[6783]: conn=2 fd=15 ACCEPT from
IP=127.0.0.1:36689 (IP=0.0.0.0:636)
Mar 12 12:26:12 linux slapd[6783]: conn=2 fd=15 TLS established
tls_ssf=256 ssf=256
Mar 12 12:26:12 linux slapd[6783]: conn=2 op=0 SRCH base="" scope=0
deref=0 filter="(objectClass=*)"
Mar 12 12:26:12 linux slapd[6783]: conn=2 op=0 SRCH
attr=supportedSASLMechanisms
Mar 12 12:26:12 linux slapd[6783]: conn=2 op=0 SEARCH RESULT tag=101
err=0 nentries=1 text=
Mar 12 12:26:12 linux slapd[6783]: conn=2 op=1 BIND dn="" method=163
Mar 12 12:26:12 linux slapd[6783]: conn=2 op=1 RESULT tag=97 err=14 text=
Mar 12 12:26:12 linux ldapsearch: DIGEST-MD5 client step 2
Mar 12 12:26:14 linux ldapsearch: DIGEST-MD5 client step 2
Mar 12 12:26:14 linux slapd[6783]: conn=2 op=2 BIND dn="" method=163
Mar 12 12:26:14 linux slapd[6783]: conn=2 op=2 BIND authcid="admin"
authzid="admin"
Mar 12 12:26:14 linux slapd[6783]: conn=2 op=2 BIND
dn="uid=admin,cn=digest-md5,cn=auth" mech=DIGEST-MD5 ssf=128
Mar 12 12:26:14 linux slapd[6783]: conn=2 op=2 RESULT tag=97 err=0 text=
Mar 12 12:26:14 linux ldapsearch: DIGEST-MD5 client step 3
Mar 12 12:26:14 linux slapd[6783]: conn=2 op=3 SRCH
base="ou=Users,dc=kolkatainfoservices,dc=in" scope=2 deref=0
filter="(objectClass=*)"
Mar 12 12:26:14 linux slapd[6783]: conn=2 op=3 SEARCH RESULT tag=101
err=0 nentries=7 text=
Mar 12 12:26:14 linux slapd[6783]: conn=2 op=4 UNBIND
Mar 12 12:26:14 linux slapd[6783]: conn=2 fd=15 closed
==============================================================
please note the ["uid=admin,cn=digest-md5,cn=auth" mech=DIGEST-MD5 ssf=128]
5> BUT when I added entry for Manager ( as per root dn) and provide the
password of manager it is not working.
even it is not working for any other uesrs which I have added in
sasldb2.
How can I fix the problem ?
PS: here is my ldif as attachment
dn: dc=kolkatainfoservices,dc=in
objectClass: domain
dc: kolkatainfoservices
structuralObjectClass: domain
dn: ou=adrbook-GER,dc=kolkatainfoservices,dc=in
ou: adrbook-GER
objectClass: top
objectClass: organizationalUnit
structuralObjectClass: organizationalUnit
dn: ou=adrbook-IND,dc=kolkatainfoservices,dc=in
ou: adrbook-IND
objectClass: top
objectClass: organizationalUnit
structuralObjectClass: organizationalUnit
dn: ou=Users,dc=kolkatainfoservices,dc=in
ou: Users
objectClass: top
objectClass: organizationalUnit
structuralObjectClass: organizationalUnit
dn: ou=Passwd,dc=kolkatainfoservices,dc=in
ou: Passwd
objectClass: top
objectClass: organizationalUnit
structuralObjectClass: organizationalUnit
dn: ou=Groups,dc=kolkatainfoservices,dc=in
ou: Groups
objectClass: top
objectClass: organizationalUnit
structuralObjectClass: organizationalUnit