Re: ldap_sasl_interactive_bind_s: Invalid credentials

["Dieter Kluenter" <dieter@dkluenter.de>]

"Pantejo Barbara-XJC864" <XJC864@motorola.com> writes:

> I have a NIS server that authenticates its users against a central LDAP
> server. To verify that it uses DIGEST-MD5 authentication, I ran the
> following command:
>
> [snip]
> $ ldapsearch -Y DIGEST-MD5 -h ids.mot.com -b
> ou=people,ou=intranet,dc=motorola,dc=com -D
> motguid=XJC864,ou=people,ou=intranet,dc=motorola,dc=com -W -v
> motguid=XJC864 ldap_init( ids.mot.com, 0 ) Enter LDAP Password:
> SASL/DIGEST-MD5 authentication started
> ldap_sasl_interactive_bind_s: Invalid credentials
>         additional info: SASL(-1): generic failure: unable canonify user
> and get auxprops $ [snap]
>
> As you can see, it starts MD5 authentication but get this error (even
> though I enter the correct password).  Has anyone encountered and fixed
> such an error? Does anyone know how to troubleshoot this error? Any
> assistance would be appreciated.

Don't use the -D flag but -U flag with and a uid value.

-Dieter

-- 
Dieter Klünter | Systemberatung
http://www.dkluenter.de
GPG Key ID:8EF7B6C6