[Date Prev][Date Next] [Chronological] [Thread] [Top]

Re: Authenticate to ldap using Kerberos



On 08/09/10 12:15 -0500, Dan White wrote:
To have slapd use saslauthd for authentication, you'll need to create the
file /usr/lib/sasl2/slapd.conf, with these contents:

pwcheck_method: saslauthd
mech_list: plain login

and optionally

keytab: /etc/krb5.keytab   (which is the standard location)

Check that. That should be:

pwcheck_method: saslauthd
mech_list: plain login gssapi external
keytab: /etc/krb5.keytab

Do you have ldap/acorn.squirrel@SQUIRREL in /etc/krb5.keytab, on the
server? Is it readable by the slapd user?

Also see:

http://www.cyrusimap.org/mediawiki/index.php/FAQ#Cyrus_SASL_Questions

--
Dan White