Cant make ldapsearch

mark gavrilman via Cyrus-sasl <[email protected]>
Newsgroups gmane.comp.security.cyrus.sasl
Message-ID <[email protected]>
Hi experts,

I'm configuring openldap+sasl+samba for my company. I made a lot of googling without success Please assist me to resolve this issue. I have following when i run ldapsearch (*********after ldapsearch log i gave some additional configurations):

[root@example openldap]# ldapsearch -LLL -U [email protected] -v '([email protected])' uid -d -1
ldap_initialize( <DEFAULT> )
ldap_create
ldap_pvt_sasl_getmech
ldap_search
put_filter: "(objectclass=*)"
put_filter: simple
put_simple_filter: "objectclass=*"
ldap_build_search_req ATTRS: supportedSASLMechanisms
ldap_send_initial_request
ldap_new_connection 1 1 0
ldap_int_open_connection
ldap_connect_to_host: TCP localhost:389
ldap_new_socket: 3
ldap_prepare_socket: 3
ldap_connect_to_host: Trying ::1 389
ldap_pvt_connect: fd: 3 tm: -1 async: 0
attempting to connect:
connect success
ldap_open_defconn: successful
ldap_send_server_request
ber_scanf fmt ({it) ber:
ber_dump: buf=0x16a1730 ptr=0x16a1730 end=0x16a1770 len=64
0000: 30 3e 02 01 01 63 39 04 00 0a 01 00 0a 01 00 02 0>...c9.........
0010: 01 00 02 01 00 01 01 00 87 0b 6f 62 6a 65 63 74 ..........object
0020: 63 6c 61 73 73 30 19 04 17 73 75 70 70 6f 72 74 class0...support
0030: 65 64 53 41 53 4c 4d 65 63 68 61 6e 69 73 6d 73 edSASLMechanisms
ber_scanf fmt ({) ber:
ber_dump: buf=0x16a1730 ptr=0x16a1735 end=0x16a1770 len=59
0000: 63 39 04 00 0a 01 00 0a 01 00 02 01 00 02 01 00 c9..............
0010: 01 01 00 87 0b 6f 62 6a 65 63 74 63 6c 61 73 73 .....objectclass
0020: 30 19 04 17 73 75 70 70 6f 72 74 65 64 53 41 53 0...supportedSAS
0030: 4c 4d 65 63 68 61 6e 69 73 6d 73 LMechanisms
ber_flush2: 64 bytes to sd 3
0000: 30 3e 02 01 01 63 39 04 00 0a 01 00 0a 01 00 02 0>...c9.........
0010: 01 00 02 01 00 01 01 00 87 0b 6f 62 6a 65 63 74 ..........object
0020: 63 6c 61 73 73 30 19 04 17 73 75 70 70 6f 72 74 class0...support
0030: 65 64 53 41 53 4c 4d 65 63 68 61 6e 69 73 6d 73 edSASLMechanisms
ldap_write: want=64, written=64
0000: 30 3e 02 01 01 63 39 04 00 0a 01 00 0a 01 00 02 0>...c9.........
0010: 01 00 02 01 00 01 01 00 87 0b 6f 62 6a 65 63 74 ..........object
0020: 63 6c 61 73 73 30 19 04 17 73 75 70 70 6f 72 74 class0...support
0030: 65 64 53 41 53 4c 4d 65 63 68 61 6e 69 73 6d 73 edSASLMechanisms
ldap_result ld 0x16993b0 msgid 1
wait4msg ld 0x16993b0 msgid 1 (infinite timeout)
wait4msg continue ld 0x16993b0 msgid 1 all 1
** ld 0x16993b0 Connections:
* host: localhost port: 389 (default)
refcnt: 2 status: Connected
last used: Sat Nov 5 14:10:08 2016

** ld 0x16993b0 Outstanding Requests:
* msgid 1, origid 1, status InProgress
outstanding referrals 0, parent count 0
ld 0x16993b0 request count 1 (abandoned 0)
** ld 0x16993b0 Response Queue:
Empty
ld 0x16993b0 response count 0
ldap_chkResponseList ld 0x16993b0 msgid 1 all 1
ldap_chkResponseList returns ld 0x16993b0 NULL
ldap_int_select
read1msg: ld 0x16993b0 msgid 1 all 1
ber_get_next
ldap_read: want=8, got=8
0000: 30 32 02 01 01 64 2d 04 02...d-.
ldap_read: want=44, got=44
0000: 00 30 29 30 27 04 17 73 75 70 70 6f 72 74 65 64 .0)0'..supported
0010: 53 41 53 4c 4d 65 63 68 61 6e 69 73 6d 73 31 0c SASLMechanisms1.
0020: 04 0a 44 49 47 45 53 54 2d 4d 44 35 ..DIGEST-MD5
ber_get_next: tag 0x30 len 50 contents:
ber_dump: buf=0x16a2be0 ptr=0x16a2be0 end=0x16a2c12 len=50
0000: 02 01 01 64 2d 04 00 30 29 30 27 04 17 73 75 70 ...d-..0)0'..sup
0010: 70 6f 72 74 65 64 53 41 53 4c 4d 65 63 68 61 6e portedSASLMechan
0020: 69 73 6d 73 31 0c 04 0a 44 49 47 45 53 54 2d 4d isms1...DIGEST-M
0030: 44 35 D5
read1msg: ld 0x16993b0 msgid 1 message type search-entry
wait4msg continue ld 0x16993b0 msgid 1 all 1
** ld 0x16993b0 Connections:
* host: localhost port: 389 (default)
refcnt: 2 status: Connected
last used: Sat Nov 5 14:10:08 2016

** ld 0x16993b0 Outstanding Requests:
* msgid 1, origid 1, status InProgress
outstanding referrals 0, parent count 0
ld 0x16993b0 request count 1 (abandoned 0)
** ld 0x16993b0 Response Queue:
* msgid 1, type 100
ld 0x16993b0 response count 1
ldap_chkResponseList ld 0x16993b0 msgid 1 all 1
ldap_chkResponseList returns ld 0x16993b0 NULL
ldap_int_select
read1msg: ld 0x16993b0 msgid 1 all 1
ber_get_next
ldap_read: want=8, got=8
0000: 30 0c 02 01 01 65 07 0a 0....e..
ldap_read: want=6, got=6
0000: 01 00 04 00 04 00 ......
ber_get_next: tag 0x30 len 12 contents:
ber_dump: buf=0x16a2cc0 ptr=0x16a2cc0 end=0x16a2ccc len=12
0000: 02 01 01 65 07 0a 01 00 04 00 04 00 ...e........
read1msg: ld 0x16993b0 msgid 1 message type search-result
ber_scanf fmt ({eAA) ber:
ber_dump: buf=0x16a2cc0 ptr=0x16a2cc3 end=0x16a2ccc len=9
0000: 65 07 0a 01 00 04 00 04 00 e........
read1msg: ld 0x16993b0 0 new referrals
read1msg: mark request completed, ld 0x16993b0 msgid 1
request done: ld 0x16993b0 msgid 1
res_errno: 0, res_error: <>, res_matched: <>
ldap_free_request (origid 1, msgid 1)
adding response ld 0x16993b0 msgid 1 type 101:
ldap_parse_result
ber_scanf fmt ({iAA) ber:
ber_dump: buf=0x16a2cc0 ptr=0x16a2cc3 end=0x16a2ccc len=9
0000: 65 07 0a 01 00 04 00 04 00 e........
ber_scanf fmt (}) ber:
ber_dump: buf=0x16a2cc0 ptr=0x16a2ccc end=0x16a2ccc len=0
ldap_get_values
ber_scanf fmt ({x{{a) ber:
ber_dump: buf=0x16a2be0 ptr=0x16a2be3 end=0x16a2c12 len=47
0000: 64 2d 04 00 30 29 30 27 04 17 73 75 70 70 6f 72 d-..0)0'..suppor
0010: 74 65 64 53 41 53 4c 4d 65 63 68 61 6e 69 73 6d tedSASLMechanism
0020: 73 31 0c 04 0a 44 49 47 45 53 54 2d 4d 44 35 s1...DIGEST-MD5
ber_scanf fmt ([v]) ber:
ber_dump: buf=0x16a2be0 ptr=0x16a2c04 end=0x16a2c12 len=14
0000: 31 0c 04 0a 44 49 47 45 53 54 2d 4d 44 35 1...DIGEST-MD5
ldap_msgfree
ldap_sasl_interactive_bind: server supports: DIGEST-MD5
ldap_int_sasl_bind: DIGEST-MD5
ldap_int_sasl_open: host=localhost
SASL/DIGEST-MD5 authentication started
ldap_sasl_bind
ldap_send_initial_request
ldap_send_server_request
ber_scanf fmt ({it) ber:
ber_dump: buf=0x16a5e20 ptr=0x16a5e20 end=0x16a5e3a len=26
0000: 30 18 02 01 02 60 13 02 01 03 04 00 a3 0c 04 0a 0....`..........
0010: 44 49 47 45 53 54 2d 4d 44 35 DIGEST-MD5
ber_scanf fmt ({i) ber:
ber_dump: buf=0x16a5e20 ptr=0x16a5e25 end=0x16a5e3a len=21
0000: 60 13 02 01 03 04 00 a3 0c 04 0a 44 49 47 45 53 `..........DIGES
0010: 54 2d 4d 44 35 T-MD5
ber_flush2: 26 bytes to sd 3
0000: 30 18 02 01 02 60 13 02 01 03 04 00 a3 0c 04 0a 0....`..........
0010: 44 49 47 45 53 54 2d 4d 44 35 DIGEST-MD5
ldap_write: want=26, written=26
0000: 30 18 02 01 02 60 13 02 01 03 04 00 a3 0c 04 0a 0....`..........
0010: 44 49 47 45 53 54 2d 4d 44 35 DIGEST-MD5
ldap_msgfree
ldap_result ld 0x16993b0 msgid 2
wait4msg ld 0x16993b0 msgid 2 (infinite timeout)
wait4msg continue ld 0x16993b0 msgid 2 all 1
** ld 0x16993b0 Connections:
* host: localhost port: 389 (default)
refcnt: 2 status: Connected
last used: Sat Nov 5 14:10:08 2016

** ld 0x16993b0 Outstanding Requests:
* msgid 2, origid 2, status InProgress
outstanding referrals 0, parent count 0
ld 0x16993b0 request count 1 (abandoned 0)
** ld 0x16993b0 Response Queue:
Empty
ld 0x16993b0 response count 0
ldap_chkResponseList ld 0x16993b0 msgid 2 all 1
ldap_chkResponseList returns ld 0x16993b0 NULL
ldap_int_select
read1msg: ld 0x16993b0 msgid 2 all 1
ber_get_next
ldap_read: want=8, got=8
0000: 30 81 d9 02 01 02 61 81 0.....a.
ldap_read: want=212, got=212
0000: d3 0a 01 0e 04 00 04 1c 53 41 53 4c 28 30 29 3a ........SASL(0):
0010: 20 73 75 63 63 65 73 73 66 75 6c 20 72 65 73 75 successful resu
0020: 6c 74 3a 20 87 81 ad 6e 6f 6e 63 65 3d 22 4f 53 lt: ...nonce="OS
0030: 38 6d 31 32 77 6a 41 62 6d 2b 62 4e 50 67 6a 37 8m12wjAbm+bNPgj7
0040: 2b 48 53 6e 65 36 58 69 41 6f 6f 6a 37 6a 31 6f +HSne6XiAooj7j1o
0050: 41 38 54 49 34 78 58 71 6f 3d 22 2c 72 65 61 6c A8TI4xXqo=",real
0060: 6d 3d 22 6c 6f 63 61 6c 68 6f 73 74 22 2c 71 6f m="localhost",qo
0070: 70 3d 22 61 75 74 68 2c 61 75 74 68 2d 69 6e 74 p="auth,auth-int
0080: 2c 61 75 74 68 2d 63 6f 6e 66 22 2c 63 69 70 68 ,auth-conf",ciph
0090: 65 72 3d 22 72 63 34 2d 34 30 2c 72 63 34 2d 35 er="rc4-40,rc4-5
00a0: 36 2c 72 63 34 22 2c 6d 61 78 62 75 66 3d 36 35 6,rc4",maxbuf=65
00b0: 35 33 36 2c 63 68 61 72 73 65 74 3d 75 74 66 2d 536,charset=utf-
00c0: 38 2c 61 6c 67 6f 72 69 74 68 6d 3d 6d 64 35 2d 8,algorithm=md5-
00d0: 73 65 73 73 sess
ber_get_next: tag 0x30 len 217 contents:
ber_dump: buf=0x16a6f00 ptr=0x16a6f00 end=0x16a6fd9 len=217
0000: 02 01 02 61 81 d3 0a 01 0e 04 00 04 1c 53 41 53 ...a.........SAS
0010: 4c 28 30 29 3a 20 73 75 63 63 65 73 73 66 75 6c L(0): successful
0020: 20 72 65 73 75 6c 74 3a 20 87 81 ad 6e 6f 6e 63 result: ...nonc
0030: 65 3d 22 4f 53 38 6d 31 32 77 6a 41 62 6d 2b 62 e="OS8m12wjAbm+b
0040: 4e 50 67 6a 37 2b 48 53 6e 65 36 58 69 41 6f 6f NPgj7+HSne6XiAoo
0050: 6a 37 6a 31 6f 41 38 54 49 34 78 58 71 6f 3d 22 j7j1oA8TI4xXqo="
0060: 2c 72 65 61 6c 6d 3d 22 6c 6f 63 61 6c 68 6f 73 ,realm="localhos
0070: 74 22 2c 71 6f 70 3d 22 61 75 74 68 2c 61 75 74 t",qop="auth,aut
0080: 68 2d 69 6e 74 2c 61 75 74 68 2d 63 6f 6e 66 22 h-int,auth-conf"
0090: 2c 63 69 70 68 65 72 3d 22 72 63 34 2d 34 30 2c ,cipher="rc4-40,
00a0: 72 63 34 2d 35 36 2c 72 63 34 22 2c 6d 61 78 62 rc4-56,rc4",maxb
00b0: 75 66 3d 36 35 35 33 36 2c 63 68 61 72 73 65 74 uf=65536,charset
00c0: 3d 75 74 66 2d 38 2c 61 6c 67 6f 72 69 74 68 6d =utf-8,algorithm
00d0: 3d 6d 64 35 2d 73 65 73 73 =md5-sess
read1msg: ld 0x16993b0 msgid 2 message type bind
ber_scanf fmt ({eAA) ber:
ber_dump: buf=0x16a6f00 ptr=0x16a6f03 end=0x16a6fd9 len=214
0000: 61 81 d3 0a 01 0e 04 00 04 1c 53 41 53 4c 28 30 a.........SASL(0
0010: 29 3a 20 73 75 63 63 65 73 73 66 75 6c 20 72 65 ): successful re
0020: 73 75 6c 74 3a 20 87 81 ad 6e 6f 6e 63 65 3d 22 sult: ...nonce="
0030: 4f 53 38 6d 31 32 77 6a 41 62 6d 2b 62 4e 50 67 OS8m12wjAbm+bNPg
0040: 6a 37 2b 48 53 6e 65 36 58 69 41 6f 6f 6a 37 6a j7+HSne6XiAooj7j
0050: 31 6f 41 38 54 49 34 78 58 71 6f 3d 22 2c 72 65 1oA8TI4xXqo=",re
0060: 61 6c 6d 3d 22 6c 6f 63 61 6c 68 6f 73 74 22 2c alm="localhost",
0070: 71 6f 70 3d 22 61 75 74 68 2c 61 75 74 68 2d 69 qop="auth,auth-i
0080: 6e 74 2c 61 75 74 68 2d 63 6f 6e 66 22 2c 63 69 nt,auth-conf",ci
0090: 70 68 65 72 3d 22 72 63 34 2d 34 30 2c 72 63 34 pher="rc4-40,rc4
00a0: 2d 35 36 2c 72 63 34 22 2c 6d 61 78 62 75 66 3d -56,rc4",maxbuf=
00b0: 36 35 35 33 36 2c 63 68 61 72 73 65 74 3d 75 74 65536,charset=ut
00c0: 66 2d 38 2c 61 6c 67 6f 72 69 74 68 6d 3d 6d 64 f-8,algorithm=md
00d0: 35 2d 73 65 73 73 5-sess
read1msg: ld 0x16993b0 0 new referrals
read1msg: mark request completed, ld 0x16993b0 msgid 2
request done: ld 0x16993b0 msgid 2
res_errno: 14, res_error: <SASL(0): successful result: >, res_matched: <>
ldap_free_request (origid 2, msgid 2)
ldap_int_sasl_bind: <null>
ldap_parse_sasl_bind_result
ber_scanf fmt ({eAA) ber:
ber_dump: buf=0x16a6f00 ptr=0x16a6f03 end=0x16a6fd9 len=214
0000: 61 81 d3 0a 01 0e 04 00 04 1c 53 41 53 4c 28 30 a.........SASL(0
0010: 29 3a 20 73 75 63 63 65 73 73 66 75 6c 20 72 65 ): successful re
0020: 73 75 6c 74 3a 20 87 81 ad 6e 6f 6e 63 65 3d 22 sult: ...nonce="
0030: 4f 53 38 6d 31 32 77 6a 41 62 6d 2b 62 4e 50 67 OS8m12wjAbm+bNPg
0040: 6a 37 2b 48 53 6e 65 36 58 69 41 6f 6f 6a 37 6a j7+HSne6XiAooj7j
0050: 31 6f 41 38 54 49 34 78 58 71 6f 3d 22 2c 72 65 1oA8TI4xXqo=",re
0060: 61 6c 6d 3d 22 6c 6f 63 61 6c 68 6f 73 74 22 2c alm="localhost",
0070: 71 6f 70 3d 22 61 75 74 68 2c 61 75 74 68 2d 69 qop="auth,auth-i
0080: 6e 74 2c 61 75 74 68 2d 63 6f 6e 66 22 2c 63 69 nt,auth-conf",ci
0090: 70 68 65 72 3d 22 72 63 34 2d 34 30 2c 72 63 34 pher="rc4-40,rc4
00a0: 2d 35 36 2c 72 63 34 22 2c 6d 61 78 62 75 66 3d -56,rc4",maxbuf=
00b0: 36 35 35 33 36 2c 63 68 61 72 73 65 74 3d 75 74 65536,charset=ut
00c0: 66 2d 38 2c 61 6c 67 6f 72 69 74 68 6d 3d 6d 64 f-8,algorithm=md
00d0: 35 2d 73 65 73 73 5-sess
ber_scanf fmt (O) ber:
ber_dump: buf=0x16a6f00 ptr=0x16a6f29 end=0x16a6fd9 len=176
0000: 87 81 ad 6e 6f 6e 63 65 3d 22 4f 53 38 6d 31 32 ...nonce="OS8m12
0010: 77 6a 41 62 6d 2b 62 4e 50 67 6a 37 2b 48 53 6e wjAbm+bNPgj7+HSn
0020: 65 36 58 69 41 6f 6f 6a 37 6a 31 6f 41 38 54 49 e6XiAooj7j1oA8TI
0030: 34 78 58 71 6f 3d 22 2c 72 65 61 6c 6d 3d 22 6c 4xXqo=",realm="l
0040: 6f 63 61 6c 68 6f 73 74 22 2c 71 6f 70 3d 22 61 ocalhost",qop="a
0050: 75 74 68 2c 61 75 74 68 2d 69 6e 74 2c 61 75 74 uth,auth-int,aut
0060: 68 2d 63 6f 6e 66 22 2c 63 69 70 68 65 72 3d 22 h-conf",cipher="
0070: 72 63 34 2d 34 30 2c 72 63 34 2d 35 36 2c 72 63 rc4-40,rc4-56,rc
0080: 34 22 2c 6d 61 78 62 75 66 3d 36 35 35 33 36 2c 4",maxbuf=65536,
0090: 63 68 61 72 73 65 74 3d 75 74 66 2d 38 2c 61 6c charset=utf-8,al
00a0: 67 6f 72 69 74 68 6d 3d 6d 64 35 2d 73 65 73 73 gorithm=md5-sess
ldap_parse_result
ber_scanf fmt ({iAA) ber:
ber_dump: buf=0x16a6f00 ptr=0x16a6f03 end=0x16a6fd9 len=214
0000: 61 81 d3 0a 01 0e 04 00 04 1c 53 41 53 4c 28 30 a.........SASL(0
0010: 29 3a 20 73 75 63 63 65 73 73 66 75 6c 20 72 65 ): successful re
0020: 73 75 6c 74 3a 20 87 81 ad 6e 6f 6e 63 65 3d 22 sult: ...nonce="
0030: 4f 53 38 6d 31 32 77 6a 41 62 6d 2b 62 4e 50 67 OS8m12wjAbm+bNPg
0040: 6a 37 2b 48 53 6e 65 36 58 69 41 6f 6f 6a 37 6a j7+HSne6XiAooj7j
0050: 31 6f 41 38 54 49 34 78 58 71 6f 3d 22 2c 72 65 1oA8TI4xXqo=",re
0060: 61 6c 6d 3d 22 6c 6f 63 61 6c 68 6f 73 74 22 2c alm="localhost",
0070: 71 6f 70 3d 22 61 75 74 68 2c 61 75 74 68 2d 69 qop="auth,auth-i
0080: 6e 74 2c 61 75 74 68 2d 63 6f 6e 66 22 2c 63 69 nt,auth-conf",ci
0090: 70 68 65 72 3d 22 72 63 34 2d 34 30 2c 72 63 34 pher="rc4-40,rc4
00a0: 2d 35 36 2c 72 63 34 22 2c 6d 61 78 62 75 66 3d -56,rc4",maxbuf=
00b0: 36 35 35 33 36 2c 63 68 61 72 73 65 74 3d 75 74 65536,charset=ut
00c0: 66 2d 38 2c 61 6c 67 6f 72 69 74 68 6d 3d 6d 64 f-8,algorithm=md
00d0: 35 2d 73 65 73 73 5-sess
ber_scanf fmt (x) ber:
ber_dump: buf=0x16a6f00 ptr=0x16a6f29 end=0x16a6fd9 len=176
0000: 87 81 ad 6e 6f 6e 63 65 3d 22 4f 53 38 6d 31 32 ...nonce="OS8m12
0010: 77 6a 41 62 6d 2b 62 4e 50 67 6a 37 2b 48 53 6e wjAbm+bNPgj7+HSn
0020: 65 36 58 69 41 6f 6f 6a 37 6a 31 6f 41 38 54 49 e6XiAooj7j1oA8TI
0030: 34 78 58 71 6f 3d 22 2c 72 65 61 6c 6d 3d 22 6c 4xXqo=",realm="l
0040: 6f 63 61 6c 68 6f 73 74 22 2c 71 6f 70 3d 22 61 ocalhost",qop="a
0050: 75 74 68 2c 61 75 74 68 2d 69 6e 74 2c 61 75 74 uth,auth-int,aut
0060: 68 2d 63 6f 6e 66 22 2c 63 69 70 68 65 72 3d 22 h-conf",cipher="
0070: 72 63 34 2d 34 30 2c 72 63 34 2d 35 36 2c 72 63 rc4-40,rc4-56,rc
0080: 34 22 2c 6d 61 78 62 75 66 3d 36 35 35 33 36 2c 4",maxbuf=65536,
0090: 63 68 61 72 73 65 74 3d 75 74 66 2d 38 2c 61 6c charset=utf-8,al
00a0: 67 6f 72 69 74 68 6d 3d 6d 64 35 2d 73 65 73 73 gorithm=md5-sess
ber_scanf fmt (}) ber:
ber_dump: buf=0x16a6f00 ptr=0x16a6fd9 end=0x16a6fd9 len=0
sasl_client_step: 2
Please enter your password:
sasl_client_step: 1
ldap_sasl_bind
ldap_send_initial_request
ldap_send_server_request
ber_scanf fmt ({it) ber:
ber_dump: buf=0x16a6ff0 ptr=0x16a6ff0 end=0x16a7127 len=311
0000: 30 82 01 33 02 01 03 60 82 01 2c 02 01 03 04 00 0..3...`..,.....
0010: a3 82 01 23 04 0a 44 49 47 45 53 54 2d 4d 44 35 ...#..DIGEST-MD5
0020: 04 82 01 13 75 73 65 72 6e 61 6d 65 3d 22 6d 61 ....username="ma
0030: 74 74 40 65 78 61 6d 70 6c 65 2e 63 6f 6d 22 2c [email protected]",
0040: 72 65 61 6c 6d 3d 22 6c 6f 63 61 6c 68 6f 73 74 realm="localhost
0050: 22 2c 6e 6f 6e 63 65 3d 22 4f 53 38 6d 31 32 77 ",nonce="OS8m12w
0060: 6a 41 62 6d 2b 62 4e 50 67 6a 37 2b 48 53 6e 65 jAbm+bNPgj7+HSne
0070: 36 58 69 41 6f 6f 6a 37 6a 31 6f 41 38 54 49 34 6XiAooj7j1oA8TI4
0080: 78 58 71 6f 3d 22 2c 63 6e 6f 6e 63 65 3d 22 56 xXqo=",cnonce="V
0090: 53 69 37 74 49 66 2b 48 78 59 5a 35 2b 4e 48 44 Si7tIf+HxYZ5+NHD
00a0: 56 72 6c 6b 51 43 67 34 57 58 66 51 71 51 4c 33 VrlkQCg4WXfQqQL3
00b0: 52 53 36 6d 4c 64 7a 52 4f 34 3d 22 2c 6e 63 3d RS6mLdzRO4=",nc=
00c0: 30 30 30 30 30 30 30 31 2c 71 6f 70 3d 61 75 74 00000001,qop=aut
00d0: 68 2d 63 6f 6e 66 2c 63 69 70 68 65 72 3d 72 63 h-conf,cipher=rc
00e0: 34 2c 6d 61 78 62 75 66 3d 31 36 37 37 37 32 31 4,maxbuf=1677721
00f0: 35 2c 64 69 67 65 73 74 2d 75 72 69 3d 22 6c 64 5,digest-uri="ld
0100: 61 70 2f 6c 6f 63 61 6c 68 6f 73 74 22 2c 72 65 ap/localhost",re
0110: 73 70 6f 6e 73 65 3d 34 34 31 63 33 36 62 65 39 sponse=441c36be9
0120: 63 63 31 34 37 64 39 37 30 65 35 37 34 31 37 35 cc147d970e574175
0130: 65 34 30 36 38 62 33 e4068b3
ber_scanf fmt ({i) ber:
ber_dump: buf=0x16a6ff0 ptr=0x16a6ff7 end=0x16a7127 len=304
0000: 60 82 01 2c 02 01 03 04 00 a3 82 01 23 04 0a 44 `..,........#..D
0010: 49 47 45 53 54 2d 4d 44 35 04 82 01 13 75 73 65 IGEST-MD5....use
0020: 72 6e 61 6d 65 3d 22 6d 61 74 74 40 65 78 61 6d rname="matt@exam
0030: 70 6c 65 2e 63 6f 6d 22 2c 72 65 61 6c 6d 3d 22 ple.com",realm="
0040: 6c 6f 63 61 6c 68 6f 73 74 22 2c 6e 6f 6e 63 65 localhost",nonce
0050: 3d 22 4f 53 38 6d 31 32 77 6a 41 62 6d 2b 62 4e ="OS8m12wjAbm+bN
0060: 50 67 6a 37 2b 48 53 6e 65 36 58 69 41 6f 6f 6a Pgj7+HSne6XiAooj
0070: 37 6a 31 6f 41 38 54 49 34 78 58 71 6f 3d 22 2c 7j1oA8TI4xXqo=",
0080: 63 6e 6f 6e 63 65 3d 22 56 53 69 37 74 49 66 2b cnonce="VSi7tIf+
0090: 48 78 59 5a 35 2b 4e 48 44 56 72 6c 6b 51 43 67 HxYZ5+NHDVrlkQCg
00a0: 34 57 58 66 51 71 51 4c 33 52 53 36 6d 4c 64 7a 4WXfQqQL3RS6mLdz
00b0: 52 4f 34 3d 22 2c 6e 63 3d 30 30 30 30 30 30 30 RO4=",nc=0000000
00c0: 31 2c 71 6f 70 3d 61 75 74 68 2d 63 6f 6e 66 2c 1,qop=auth-conf,
00d0: 63 69 70 68 65 72 3d 72 63 34 2c 6d 61 78 62 75 cipher=rc4,maxbu
00e0: 66 3d 31 36 37 37 37 32 31 35 2c 64 69 67 65 73 f=16777215,diges
00f0: 74 2d 75 72 69 3d 22 6c 64 61 70 2f 6c 6f 63 61 t-uri="ldap/loca
0100: 6c 68 6f 73 74 22 2c 72 65 73 70 6f 6e 73 65 3d lhost",response=
0110: 34 34 31 63 33 36 62 65 39 63 63 31 34 37 64 39 441c36be9cc147d9
0120: 37 30 65 35 37 34 31 37 35 65 34 30 36 38 62 33 70e574175e4068b3
ber_flush2: 311 bytes to sd 3
0000: 30 82 01 33 02 01 03 60 82 01 2c 02 01 03 04 00 0..3...`..,.....
0010: a3 82 01 23 04 0a 44 49 47 45 53 54 2d 4d 44 35 ...#..DIGEST-MD5
0020: 04 82 01 13 75 73 65 72 6e 61 6d 65 3d 22 6d 61 ....username="ma
0030: 74 74 40 65 78 61 6d 70 6c 65 2e 63 6f 6d 22 2c [email protected]",
0040: 72 65 61 6c 6d 3d 22 6c 6f 63 61 6c 68 6f 73 74 realm="localhost
0050: 22 2c 6e 6f 6e 63 65 3d 22 4f 53 38 6d 31 32 77 ",nonce="OS8m12w
0060: 6a 41 62 6d 2b 62 4e 50 67 6a 37 2b 48 53 6e 65 jAbm+bNPgj7+HSne
0070: 36 58 69 41 6f 6f 6a 37 6a 31 6f 41 38 54 49 34 6XiAooj7j1oA8TI4
0080: 78 58 71 6f 3d 22 2c 63 6e 6f 6e 63 65 3d 22 56 xXqo=",cnonce="V
0090: 53 69 37 74 49 66 2b 48 78 59 5a 35 2b 4e 48 44 Si7tIf+HxYZ5+NHD
00a0: 56 72 6c 6b 51 43 67 34 57 58 66 51 71 51 4c 33 VrlkQCg4WXfQqQL3
00b0: 52 53 36 6d 4c 64 7a 52 4f 34 3d 22 2c 6e 63 3d RS6mLdzRO4=",nc=
00c0: 30 30 30 30 30 30 30 31 2c 71 6f 70 3d 61 75 74 00000001,qop=aut
00d0: 68 2d 63 6f 6e 66 2c 63 69 70 68 65 72 3d 72 63 h-conf,cipher=rc
00e0: 34 2c 6d 61 78 62 75 66 3d 31 36 37 37 37 32 31 4,maxbuf=1677721
00f0: 35 2c 64 69 67 65 73 74 2d 75 72 69 3d 22 6c 64 5,digest-uri="ld
0100: 61 70 2f 6c 6f 63 61 6c 68 6f 73 74 22 2c 72 65 ap/localhost",re
0110: 73 70 6f 6e 73 65 3d 34 34 31 63 33 36 62 65 39 sponse=441c36be9
0120: 63 63 31 34 37 64 39 37 30 65 35 37 34 31 37 35 cc147d970e574175
0130: 65 34 30 36 38 62 33 e4068b3
ldap_write: want=311, written=311
0000: 30 82 01 33 02 01 03 60 82 01 2c 02 01 03 04 00 0..3...`..,.....
0010: a3 82 01 23 04 0a 44 49 47 45 53 54 2d 4d 44 35 ...#..DIGEST-MD5
0020: 04 82 01 13 75 73 65 72 6e 61 6d 65 3d 22 6d 61 ....username="ma
0030: 74 74 40 65 78 61 6d 70 6c 65 2e 63 6f 6d 22 2c [email protected]",
0040: 72 65 61 6c 6d 3d 22 6c 6f 63 61 6c 68 6f 73 74 realm="localhost
0050: 22 2c 6e 6f 6e 63 65 3d 22 4f 53 38 6d 31 32 77 ",nonce="OS8m12w
0060: 6a 41 62 6d 2b 62 4e 50 67 6a 37 2b 48 53 6e 65 jAbm+bNPgj7+HSne
0070: 36 58 69 41 6f 6f 6a 37 6a 31 6f 41 38 54 49 34 6XiAooj7j1oA8TI4
0080: 78 58 71 6f 3d 22 2c 63 6e 6f 6e 63 65 3d 22 56 xXqo=",cnonce="V
0090: 53 69 37 74 49 66 2b 48 78 59 5a 35 2b 4e 48 44 Si7tIf+HxYZ5+NHD
00a0: 56 72 6c 6b 51 43 67 34 57 58 66 51 71 51 4c 33 VrlkQCg4WXfQqQL3
00b0: 52 53 36 6d 4c 64 7a 52 4f 34 3d 22 2c 6e 63 3d RS6mLdzRO4=",nc=
00c0: 30 30 30 30 30 30 30 31 2c 71 6f 70 3d 61 75 74 00000001,qop=aut
00d0: 68 2d 63 6f 6e 66 2c 63 69 70 68 65 72 3d 72 63 h-conf,cipher=rc
00e0: 34 2c 6d 61 78 62 75 66 3d 31 36 37 37 37 32 31 4,maxbuf=1677721
00f0: 35 2c 64 69 67 65 73 74 2d 75 72 69 3d 22 6c 64 5,digest-uri="ld
0100: 61 70 2f 6c 6f 63 61 6c 68 6f 73 74 22 2c 72 65 ap/localhost",re
0110: 73 70 6f 6e 73 65 3d 34 34 31 63 33 36 62 65 39 sponse=441c36be9
0120: 63 63 31 34 37 64 39 37 30 65 35 37 34 31 37 35 cc147d970e574175
0130: 65 34 30 36 38 62 33 e4068b3
ldap_msgfree
ldap_result ld 0x16993b0 msgid 3
wait4msg ld 0x16993b0 msgid 3 (infinite timeout)
wait4msg continue ld 0x16993b0 msgid 3 all 1
** ld 0x16993b0 Connections:
* host: localhost port: 389 (default)
refcnt: 2 status: Connected
last used: Sat Nov 5 14:10:16 2016

** ld 0x16993b0 Outstanding Requests:
* msgid 3, origid 3, status InProgress
outstanding referrals 0, parent count 0
ld 0x16993b0 request count 1 (abandoned 0)
** ld 0x16993b0 Response Queue:
Empty
ld 0x16993b0 response count 0
ldap_chkResponseList ld 0x16993b0 msgid 3 all 1
ldap_chkResponseList returns ld 0x16993b0 NULL
ldap_int_select
read1msg: ld 0x16993b0 msgid 3 all 1
ber_get_next
ldap_read: want=8, got=8
0000: 30 4f 02 01 03 61 4a 0a 0O...aJ.
ldap_read: want=73, got=73
0000: 01 50 04 00 04 43 53 41 53 4c 28 2d 31 29 3a 20 .P...CSASL(-1):
0010: 67 65 6e 65 72 69 63 20 66 61 69 6c 75 72 65 3a generic failure:
0020: 20 75 6e 61 62 6c 65 20 74 6f 20 63 61 6e 6f 6e unable to canon
0030: 69 66 79 20 75 73 65 72 20 61 6e 64 20 67 65 74 ify user and get
0040: 20 61 75 78 70 72 6f 70 73 auxprops
ber_get_next: tag 0x30 len 79 contents:
ber_dump: buf=0x16a5e70 ptr=0x16a5e70 end=0x16a5ebf len=79
0000: 02 01 03 61 4a 0a 01 50 04 00 04 43 53 41 53 4c ...aJ..P...CSASL
0010: 28 2d 31 29 3a 20 67 65 6e 65 72 69 63 20 66 61 (-1): generic fa
0020: 69 6c 75 72 65 3a 20 75 6e 61 62 6c 65 20 74 6f ilure: unable to
0030: 20 63 61 6e 6f 6e 69 66 79 20 75 73 65 72 20 61 canonify user a
0040: 6e 64 20 67 65 74 20 61 75 78 70 72 6f 70 73 nd get auxprops
read1msg: ld 0x16993b0 msgid 3 message type bind
ber_scanf fmt ({eAA) ber:
ber_dump: buf=0x16a5e70 ptr=0x16a5e73 end=0x16a5ebf len=76
0000: 61 4a 0a 01 50 04 00 04 43 53 41 53 4c 28 2d 31 aJ..P...CSASL(-1
0010: 29 3a 20 67 65 6e 65 72 69 63 20 66 61 69 6c 75 ): generic failu
0020: 72 65 3a 20 75 6e 61 62 6c 65 20 74 6f 20 63 61 re: unable to ca
0030: 6e 6f 6e 69 66 79 20 75 73 65 72 20 61 6e 64 20 nonify user and
0040: 67 65 74 20 61 75 78 70 72 6f 70 73 get auxprops
read1msg: ld 0x16993b0 0 new referrals
read1msg: mark request completed, ld 0x16993b0 msgid 3
request done: ld 0x16993b0 msgid 3
res_errno: 80, res_error: <SASL(-1): generic failure: unable to canonify user and get auxprops>, res_matched: <>
ldap_free_request (origid 3, msgid 3)
ldap_int_sasl_bind: <null>
ldap_parse_sasl_bind_result
ber_scanf fmt ({eAA) ber:
ber_dump: buf=0x16a5e70 ptr=0x16a5e73 end=0x16a5ebf len=76
0000: 61 4a 0a 01 50 04 00 04 43 53 41 53 4c 28 2d 31 aJ..P...CSASL(-1
0010: 29 3a 20 67 65 6e 65 72 69 63 20 66 61 69 6c 75 ): generic failu
0020: 72 65 3a 20 75 6e 61 62 6c 65 20 74 6f 20 63 61 re: unable to ca
0030: 6e 6f 6e 69 66 79 20 75 73 65 72 20 61 6e 64 20 nonify user and
0040: 67 65 74 20 61 75 78 70 72 6f 70 73 get auxprops
ldap_parse_result
ber_scanf fmt ({iAA) ber:
ber_dump: buf=0x16a5e70 ptr=0x16a5e73 end=0x16a5ebf len=76
0000: 61 4a 0a 01 50 04 00 04 43 53 41 53 4c 28 2d 31 aJ..P...CSASL(-1
0010: 29 3a 20 67 65 6e 65 72 69 63 20 66 61 69 6c 75 ): generic failu
0020: 72 65 3a 20 75 6e 61 62 6c 65 20 74 6f 20 63 61 re: unable to ca
0030: 6e 6f 6e 69 66 79 20 75 73 65 72 20 61 6e 64 20 nonify user and
0040: 67 65 74 20 61 75 78 70 72 6f 70 73 get auxprops
ber_scanf fmt (}) ber:
ber_dump: buf=0x16a5e70 ptr=0x16a5ebf end=0x16a5ebf len=0
ldap_msgfree
ldap_err2string
ldap_sasl_interactive_bind_s: Other (e.g., implementation specific) error (80)
additional info: SASL(-1): generic failure: unable to canonify user and get auxprops
ldap_free_connection 1 1
ldap_send_unbind
ber_flush2: 7 bytes to sd 3
0000: 30 05 02 01 04 42 00 0....B.
ldap_write: want=7, written=7
0000: 30 05 02 01 04 42 00 0....B.
ldap_free_connection: actually freed
---------------------------------------------------------------------------------------------------------------------------------
---------------------------------------------------------------------------------------------------------------------------------
---------------------------------------------------------------------------------------------------------------------------------
#1
[root@localhost openldap]# sasldblistusers2
[email protected]: userPassword
---------------------------------------------------------------------------------------------------------------------------------
---------------------------------------------------------------------------------------------------------------------------------
---------------------------------------------------------------------------------------------------------------------------------
#2
[root@localhost openldap]# pluginviewer -a
Installed and properly configured auxprop mechanisms are:
<none>
---------------------------------------------------------------------------------------------------------------------------------
---------------------------------------------------------------------------------------------------------------------------------
---------------------------------------------------------------------------------------------------------------------------------
#3
[root@localhost openldap]# chown -R openldap:openldap /var/lib/ldap
[root@localhost openldap]# chmod -R 644 /var/lib/ldap
[root@localhost openldap]# ls -la /var/lib/ldap
total 19140
drwSr-Sr--. 2 openldap openldap 4096 Nov 5 14:24 .
drwxr-xr-x. 37 root root 4096 Nov 5 13:31 ..
-rw-r--r--. 1 openldap openldap 2048 Nov 5 14:24 alock
-rw-r--r--. 1 openldap openldap 2326528 Nov 5 14:25 __db.001
-rw-r--r--. 1 openldap openldap 17448960 Nov 5 14:25 __db.002
-rw-r--r--. 1 openldap openldap 1884160 Nov 5 14:25 __db.003
-rw-r--r--. 1 openldap openldap 845 Nov 5 13:31 DB_CONFIG
-rw-r--r--. 1 openldap openldap 8192 Nov 5 13:39 dn2id.bdb
-rw-r--r--. 1 openldap openldap 32768 Nov 5 13:39 id2entry.bdb
-rw-r--r--. 1 openldap openldap 10485760 Nov 5 14:24 log.0000000001
---------------------------------------------------------------------------------------------------------------------------------
---------------------------------------------------------------------------------------------------------------------------------
---------------------------------------------------------------------------------------------------------------------------------
#4
[root@localhost openldap]# db_dump -p /etc/sasldb2
VERSION=3
format=print
type=hash
db_pagesize=4096
HEADER=END
matt\00example.com\00userPassword
secret
DATA=END
---------------------------------------------------------------------------------------------------------------------------------
---------------------------------------------------------------------------------------------------------------------------------
---------------------------------------------------------------------------------------------------------------------------------
#5
vi /etc/sasl2/slapd.conf
mech_list: DIGEST-MD5
pwcheck_method:saslauthd
sasldb_path: /etc/sasldb2
auxprop_plugin: sasldb


-- 
best regards
mark gavrilman
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.