SASL Proxy Authorization

To: "openldap-technical@openldap.org" <openldap-technical@openldap.org>

Subject: SASL Proxy Authorization

From: Vishesh kumar <linuxtovishesh@gmail.com>

Date: Tue, 25 Jun 2013 18:04:30 +0530

Dkim-signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:date:message-id:subject:from:to:content-type; bh=jRnFTyaJSYqOolAxwdbAcMyvRcZoze6SuJPp3J5WFEU=; b=SdNbFInskcBhwvWx2kExclyYYhENvGW5nZ7x2nrfhqtajoa7s5whikqrnrZy6QM3/K RWGyIM4iAuaaEzlNkV4yO9VMA5Fl5Q1vYYanHxsiYnhOcn0h3Y0fdJXM7YlxRO5FwSdk nfD1/DYBGFTXORFWihEeZRlZ6Xwb1Rj3FyYYSS25zX5609bUeqyU62+6EfyCShZ93rmu XMch0RkqTMAeI9JND0bl2oX4YOnADBrcQ7fQPnGLzm/SHViDofXbuZqfUbG0n/DqOgDA 1yCwftwFkGemE3pHdw4gsujXdHVwPIWvY8/e4SfLRDFdtmxio5OHGytFdQOVeIJuNks9 O0bQ==

Hi Members,

I am trying to get SASL Proxy Authorization in work. GSSAPI authentication is already in place

++++++++++++

SASL/GSSAPI authentication started

SASL username: admin@LINUXMANTRA.LOCAL

SASL SSF: 56

SASL data security layer installed.

dn:uid=admin,cn=gssapi,cn=auth

++++++++++++++++++++++++++

But following command giving error

ldapsearch -d 1 -Y GSSAPI -X "uid=vishesh,dc=linuxmantra,dc=local" -b"dc=linuxmantra,dc=local" -s base

I already mentioned "authzTo: dn:uid=vishesh,dc=linuxmantra,dc=local" for admin DN.

Thanks in advance for your help.

--
http://linuxmantra.com

Follow-Ups:

Re: SASL Proxy Authorization
- From: Dan White <dwhite@olp.net>