[Date Prev][Date Next]
[Chronological]
[Thread]
[Top]
rwm and sasl authz
Hello,
I was wondering if it is a known issue that when using sasl authorization
combined with the rewrite module, one doesn't have access to either the
binddn or the authz dn. The rewrite context bindDN is only called when the
client supplies a DN in the simple-bind fashion (-D when using ldapsearch).
But if one uses a sasl mechanism (in order to use proxy auth for example) then
the binding will happen with the result of the authz-regexp rewrite but this
is not in a context of slapo-rwm, whose bindDN context sees whatever, if any,
arbitrary bind DN the request contained (for example through -D).
Additionally there is no context regarding the authorization DN, which is
pretty much a necessity if you plan on using authFrom and have remapped the
dit.
Thank you,
Kostas Koukopoulos