Cant make ldapsearch
mark gavrilman via Cyrus-sasl <[email protected]>
| Newsgroups | gmane.comp.security.cyrus.sasl |
|---|---|
| Message-ID | <[email protected]> |
Hi experts, I'm configuring openldap+sasl+samba for my company. I made a lot of googling without success Please assist me to resolve this issue. I have following when i run ldapsearch (*********after ldapsearch log i gave some additional configurations): [root@example openldap]# ldapsearch -LLL -U [email protected] -v '([email protected])' uid -d -1 ldap_initialize( <DEFAULT> ) ldap_create ldap_pvt_sasl_getmech ldap_search put_filter: "(objectclass=*)" put_filter: simple put_simple_filter: "objectclass=*" ldap_build_search_req ATTRS: supportedSASLMechanisms ldap_send_initial_request ldap_new_connection 1 1 0 ldap_int_open_connection ldap_connect_to_host: TCP localhost:389 ldap_new_socket: 3 ldap_prepare_socket: 3 ldap_connect_to_host: Trying ::1 389 ldap_pvt_connect: fd: 3 tm: -1 async: 0 attempting to connect: connect success ldap_open_defconn: successful ldap_send_server_request ber_scanf fmt ({it) ber: ber_dump: buf=0x16a1730 ptr=0x16a1730 end=0x16a1770 len=64 0000: 30 3e 02 01 01 63 39 04 00 0a 01 00 0a 01 00 02 0>...c9......... 0010: 01 00 02 01 00 01 01 00 87 0b 6f 62 6a 65 63 74 ..........object 0020: 63 6c 61 73 73 30 19 04 17 73 75 70 70 6f 72 74 class0...support 0030: 65 64 53 41 53 4c 4d 65 63 68 61 6e 69 73 6d 73 edSASLMechanisms ber_scanf fmt ({) ber: ber_dump: buf=0x16a1730 ptr=0x16a1735 end=0x16a1770 len=59 0000: 63 39 04 00 0a 01 00 0a 01 00 02 01 00 02 01 00 c9.............. 0010: 01 01 00 87 0b 6f 62 6a 65 63 74 63 6c 61 73 73 .....objectclass 0020: 30 19 04 17 73 75 70 70 6f 72 74 65 64 53 41 53 0...supportedSAS 0030: 4c 4d 65 63 68 61 6e 69 73 6d 73 LMechanisms ber_flush2: 64 bytes to sd 3 0000: 30 3e 02 01 01 63 39 04 00 0a 01 00 0a 01 00 02 0>...c9......... 0010: 01 00 02 01 00 01 01 00 87 0b 6f 62 6a 65 63 74 ..........object 0020: 63 6c 61 73 73 30 19 04 17 73 75 70 70 6f 72 74 class0...support 0030: 65 64 53 41 53 4c 4d 65 63 68 61 6e 69 73 6d 73 edSASLMechanisms ldap_write: want=64, written=64 0000: 30 3e 02 01 01 63 39 04 00 0a 01 00 0a 01 00 02 0>...c9......... 0010: 01 00 02 01 00 01 01 00 87 0b 6f 62 6a 65 63 74 ..........object 0020: 63 6c 61 73 73 30 19 04 17 73 75 70 70 6f 72 74 class0...support 0030: 65 64 53 41 53 4c 4d 65 63 68 61 6e 69 73 6d 73 edSASLMechanisms ldap_result ld 0x16993b0 msgid 1 wait4msg ld 0x16993b0 msgid 1 (infinite timeout) wait4msg continue ld 0x16993b0 msgid 1 all 1 ** ld 0x16993b0 Connections: * host: localhost port: 389 (default) refcnt: 2 status: Connected last used: Sat Nov 5 14:10:08 2016 ** ld 0x16993b0 Outstanding Requests: * msgid 1, origid 1, status InProgress outstanding referrals 0, parent count 0 ld 0x16993b0 request count 1 (abandoned 0) ** ld 0x16993b0 Response Queue: Empty ld 0x16993b0 response count 0 ldap_chkResponseList ld 0x16993b0 msgid 1 all 1 ldap_chkResponseList returns ld 0x16993b0 NULL ldap_int_select read1msg: ld 0x16993b0 msgid 1 all 1 ber_get_next ldap_read: want=8, got=8 0000: 30 32 02 01 01 64 2d 04 02...d-. ldap_read: want=44, got=44 0000: 00 30 29 30 27 04 17 73 75 70 70 6f 72 74 65 64 .0)0'..supported 0010: 53 41 53 4c 4d 65 63 68 61 6e 69 73 6d 73 31 0c SASLMechanisms1. 0020: 04 0a 44 49 47 45 53 54 2d 4d 44 35 ..DIGEST-MD5 ber_get_next: tag 0x30 len 50 contents: ber_dump: buf=0x16a2be0 ptr=0x16a2be0 end=0x16a2c12 len=50 0000: 02 01 01 64 2d 04 00 30 29 30 27 04 17 73 75 70 ...d-..0)0'..sup 0010: 70 6f 72 74 65 64 53 41 53 4c 4d 65 63 68 61 6e portedSASLMechan 0020: 69 73 6d 73 31 0c 04 0a 44 49 47 45 53 54 2d 4d isms1...DIGEST-M 0030: 44 35 D5 read1msg: ld 0x16993b0 msgid 1 message type search-entry wait4msg continue ld 0x16993b0 msgid 1 all 1 ** ld 0x16993b0 Connections: * host: localhost port: 389 (default) refcnt: 2 status: Connected last used: Sat Nov 5 14:10:08 2016 ** ld 0x16993b0 Outstanding Requests: * msgid 1, origid 1, status InProgress outstanding referrals 0, parent count 0 ld 0x16993b0 request count 1 (abandoned 0) ** ld 0x16993b0 Response Queue: * msgid 1, type 100 ld 0x16993b0 response count 1 ldap_chkResponseList ld 0x16993b0 msgid 1 all 1 ldap_chkResponseList returns ld 0x16993b0 NULL ldap_int_select read1msg: ld 0x16993b0 msgid 1 all 1 ber_get_next ldap_read: want=8, got=8 0000: 30 0c 02 01 01 65 07 0a 0....e.. ldap_read: want=6, got=6 0000: 01 00 04 00 04 00 ...... ber_get_next: tag 0x30 len 12 contents: ber_dump: buf=0x16a2cc0 ptr=0x16a2cc0 end=0x16a2ccc len=12 0000: 02 01 01 65 07 0a 01 00 04 00 04 00 ...e........ read1msg: ld 0x16993b0 msgid 1 message type search-result ber_scanf fmt ({eAA) ber: ber_dump: buf=0x16a2cc0 ptr=0x16a2cc3 end=0x16a2ccc len=9 0000: 65 07 0a 01 00 04 00 04 00 e........ read1msg: ld 0x16993b0 0 new referrals read1msg: mark request completed, ld 0x16993b0 msgid 1 request done: ld 0x16993b0 msgid 1 res_errno: 0, res_error: <>, res_matched: <> ldap_free_request (origid 1, msgid 1) adding response ld 0x16993b0 msgid 1 type 101: ldap_parse_result ber_scanf fmt ({iAA) ber: ber_dump: buf=0x16a2cc0 ptr=0x16a2cc3 end=0x16a2ccc len=9 0000: 65 07 0a 01 00 04 00 04 00 e........ ber_scanf fmt (}) ber: ber_dump: buf=0x16a2cc0 ptr=0x16a2ccc end=0x16a2ccc len=0 ldap_get_values ber_scanf fmt ({x{{a) ber: ber_dump: buf=0x16a2be0 ptr=0x16a2be3 end=0x16a2c12 len=47 0000: 64 2d 04 00 30 29 30 27 04 17 73 75 70 70 6f 72 d-..0)0'..suppor 0010: 74 65 64 53 41 53 4c 4d 65 63 68 61 6e 69 73 6d tedSASLMechanism 0020: 73 31 0c 04 0a 44 49 47 45 53 54 2d 4d 44 35 s1...DIGEST-MD5 ber_scanf fmt ([v]) ber: ber_dump: buf=0x16a2be0 ptr=0x16a2c04 end=0x16a2c12 len=14 0000: 31 0c 04 0a 44 49 47 45 53 54 2d 4d 44 35 1...DIGEST-MD5 ldap_msgfree ldap_sasl_interactive_bind: server supports: DIGEST-MD5 ldap_int_sasl_bind: DIGEST-MD5 ldap_int_sasl_open: host=localhost SASL/DIGEST-MD5 authentication started ldap_sasl_bind ldap_send_initial_request ldap_send_server_request ber_scanf fmt ({it) ber: ber_dump: buf=0x16a5e20 ptr=0x16a5e20 end=0x16a5e3a len=26 0000: 30 18 02 01 02 60 13 02 01 03 04 00 a3 0c 04 0a 0....`.......... 0010: 44 49 47 45 53 54 2d 4d 44 35 DIGEST-MD5 ber_scanf fmt ({i) ber: ber_dump: buf=0x16a5e20 ptr=0x16a5e25 end=0x16a5e3a len=21 0000: 60 13 02 01 03 04 00 a3 0c 04 0a 44 49 47 45 53 `..........DIGES 0010: 54 2d 4d 44 35 T-MD5 ber_flush2: 26 bytes to sd 3 0000: 30 18 02 01 02 60 13 02 01 03 04 00 a3 0c 04 0a 0....`.......... 0010: 44 49 47 45 53 54 2d 4d 44 35 DIGEST-MD5 ldap_write: want=26, written=26 0000: 30 18 02 01 02 60 13 02 01 03 04 00 a3 0c 04 0a 0....`.......... 0010: 44 49 47 45 53 54 2d 4d 44 35 DIGEST-MD5 ldap_msgfree ldap_result ld 0x16993b0 msgid 2 wait4msg ld 0x16993b0 msgid 2 (infinite timeout) wait4msg continue ld 0x16993b0 msgid 2 all 1 ** ld 0x16993b0 Connections: * host: localhost port: 389 (default) refcnt: 2 status: Connected last used: Sat Nov 5 14:10:08 2016 ** ld 0x16993b0 Outstanding Requests: * msgid 2, origid 2, status InProgress outstanding referrals 0, parent count 0 ld 0x16993b0 request count 1 (abandoned 0) ** ld 0x16993b0 Response Queue: Empty ld 0x16993b0 response count 0 ldap_chkResponseList ld 0x16993b0 msgid 2 all 1 ldap_chkResponseList returns ld 0x16993b0 NULL ldap_int_select read1msg: ld 0x16993b0 msgid 2 all 1 ber_get_next ldap_read: want=8, got=8 0000: 30 81 d9 02 01 02 61 81 0.....a. ldap_read: want=212, got=212 0000: d3 0a 01 0e 04 00 04 1c 53 41 53 4c 28 30 29 3a ........SASL(0): 0010: 20 73 75 63 63 65 73 73 66 75 6c 20 72 65 73 75 successful resu 0020: 6c 74 3a 20 87 81 ad 6e 6f 6e 63 65 3d 22 4f 53 lt: ...nonce="OS 0030: 38 6d 31 32 77 6a 41 62 6d 2b 62 4e 50 67 6a 37 8m12wjAbm+bNPgj7 0040: 2b 48 53 6e 65 36 58 69 41 6f 6f 6a 37 6a 31 6f +HSne6XiAooj7j1o 0050: 41 38 54 49 34 78 58 71 6f 3d 22 2c 72 65 61 6c A8TI4xXqo=",real 0060: 6d 3d 22 6c 6f 63 61 6c 68 6f 73 74 22 2c 71 6f m="localhost",qo 0070: 70 3d 22 61 75 74 68 2c 61 75 74 68 2d 69 6e 74 p="auth,auth-int 0080: 2c 61 75 74 68 2d 63 6f 6e 66 22 2c 63 69 70 68 ,auth-conf",ciph 0090: 65 72 3d 22 72 63 34 2d 34 30 2c 72 63 34 2d 35 er="rc4-40,rc4-5 00a0: 36 2c 72 63 34 22 2c 6d 61 78 62 75 66 3d 36 35 6,rc4",maxbuf=65 00b0: 35 33 36 2c 63 68 61 72 73 65 74 3d 75 74 66 2d 536,charset=utf- 00c0: 38 2c 61 6c 67 6f 72 69 74 68 6d 3d 6d 64 35 2d 8,algorithm=md5- 00d0: 73 65 73 73 sess ber_get_next: tag 0x30 len 217 contents: ber_dump: buf=0x16a6f00 ptr=0x16a6f00 end=0x16a6fd9 len=217 0000: 02 01 02 61 81 d3 0a 01 0e 04 00 04 1c 53 41 53 ...a.........SAS 0010: 4c 28 30 29 3a 20 73 75 63 63 65 73 73 66 75 6c L(0): successful 0020: 20 72 65 73 75 6c 74 3a 20 87 81 ad 6e 6f 6e 63 result: ...nonc 0030: 65 3d 22 4f 53 38 6d 31 32 77 6a 41 62 6d 2b 62 e="OS8m12wjAbm+b 0040: 4e 50 67 6a 37 2b 48 53 6e 65 36 58 69 41 6f 6f NPgj7+HSne6XiAoo 0050: 6a 37 6a 31 6f 41 38 54 49 34 78 58 71 6f 3d 22 j7j1oA8TI4xXqo=" 0060: 2c 72 65 61 6c 6d 3d 22 6c 6f 63 61 6c 68 6f 73 ,realm="localhos 0070: 74 22 2c 71 6f 70 3d 22 61 75 74 68 2c 61 75 74 t",qop="auth,aut 0080: 68 2d 69 6e 74 2c 61 75 74 68 2d 63 6f 6e 66 22 h-int,auth-conf" 0090: 2c 63 69 70 68 65 72 3d 22 72 63 34 2d 34 30 2c ,cipher="rc4-40, 00a0: 72 63 34 2d 35 36 2c 72 63 34 22 2c 6d 61 78 62 rc4-56,rc4",maxb 00b0: 75 66 3d 36 35 35 33 36 2c 63 68 61 72 73 65 74 uf=65536,charset 00c0: 3d 75 74 66 2d 38 2c 61 6c 67 6f 72 69 74 68 6d =utf-8,algorithm 00d0: 3d 6d 64 35 2d 73 65 73 73 =md5-sess read1msg: ld 0x16993b0 msgid 2 message type bind ber_scanf fmt ({eAA) ber: ber_dump: buf=0x16a6f00 ptr=0x16a6f03 end=0x16a6fd9 len=214 0000: 61 81 d3 0a 01 0e 04 00 04 1c 53 41 53 4c 28 30 a.........SASL(0 0010: 29 3a 20 73 75 63 63 65 73 73 66 75 6c 20 72 65 ): successful re 0020: 73 75 6c 74 3a 20 87 81 ad 6e 6f 6e 63 65 3d 22 sult: ...nonce=" 0030: 4f 53 38 6d 31 32 77 6a 41 62 6d 2b 62 4e 50 67 OS8m12wjAbm+bNPg 0040: 6a 37 2b 48 53 6e 65 36 58 69 41 6f 6f 6a 37 6a j7+HSne6XiAooj7j 0050: 31 6f 41 38 54 49 34 78 58 71 6f 3d 22 2c 72 65 1oA8TI4xXqo=",re 0060: 61 6c 6d 3d 22 6c 6f 63 61 6c 68 6f 73 74 22 2c alm="localhost", 0070: 71 6f 70 3d 22 61 75 74 68 2c 61 75 74 68 2d 69 qop="auth,auth-i 0080: 6e 74 2c 61 75 74 68 2d 63 6f 6e 66 22 2c 63 69 nt,auth-conf",ci 0090: 70 68 65 72 3d 22 72 63 34 2d 34 30 2c 72 63 34 pher="rc4-40,rc4 00a0: 2d 35 36 2c 72 63 34 22 2c 6d 61 78 62 75 66 3d -56,rc4",maxbuf= 00b0: 36 35 35 33 36 2c 63 68 61 72 73 65 74 3d 75 74 65536,charset=ut 00c0: 66 2d 38 2c 61 6c 67 6f 72 69 74 68 6d 3d 6d 64 f-8,algorithm=md 00d0: 35 2d 73 65 73 73 5-sess read1msg: ld 0x16993b0 0 new referrals read1msg: mark request completed, ld 0x16993b0 msgid 2 request done: ld 0x16993b0 msgid 2 res_errno: 14, res_error: <SASL(0): successful result: >, res_matched: <> ldap_free_request (origid 2, msgid 2) ldap_int_sasl_bind: <null> ldap_parse_sasl_bind_result ber_scanf fmt ({eAA) ber: ber_dump: buf=0x16a6f00 ptr=0x16a6f03 end=0x16a6fd9 len=214 0000: 61 81 d3 0a 01 0e 04 00 04 1c 53 41 53 4c 28 30 a.........SASL(0 0010: 29 3a 20 73 75 63 63 65 73 73 66 75 6c 20 72 65 ): successful re 0020: 73 75 6c 74 3a 20 87 81 ad 6e 6f 6e 63 65 3d 22 sult: ...nonce=" 0030: 4f 53 38 6d 31 32 77 6a 41 62 6d 2b 62 4e 50 67 OS8m12wjAbm+bNPg 0040: 6a 37 2b 48 53 6e 65 36 58 69 41 6f 6f 6a 37 6a j7+HSne6XiAooj7j 0050: 31 6f 41 38 54 49 34 78 58 71 6f 3d 22 2c 72 65 1oA8TI4xXqo=",re 0060: 61 6c 6d 3d 22 6c 6f 63 61 6c 68 6f 73 74 22 2c alm="localhost", 0070: 71 6f 70 3d 22 61 75 74 68 2c 61 75 74 68 2d 69 qop="auth,auth-i 0080: 6e 74 2c 61 75 74 68 2d 63 6f 6e 66 22 2c 63 69 nt,auth-conf",ci 0090: 70 68 65 72 3d 22 72 63 34 2d 34 30 2c 72 63 34 pher="rc4-40,rc4 00a0: 2d 35 36 2c 72 63 34 22 2c 6d 61 78 62 75 66 3d -56,rc4",maxbuf= 00b0: 36 35 35 33 36 2c 63 68 61 72 73 65 74 3d 75 74 65536,charset=ut 00c0: 66 2d 38 2c 61 6c 67 6f 72 69 74 68 6d 3d 6d 64 f-8,algorithm=md 00d0: 35 2d 73 65 73 73 5-sess ber_scanf fmt (O) ber: ber_dump: buf=0x16a6f00 ptr=0x16a6f29 end=0x16a6fd9 len=176 0000: 87 81 ad 6e 6f 6e 63 65 3d 22 4f 53 38 6d 31 32 ...nonce="OS8m12 0010: 77 6a 41 62 6d 2b 62 4e 50 67 6a 37 2b 48 53 6e wjAbm+bNPgj7+HSn 0020: 65 36 58 69 41 6f 6f 6a 37 6a 31 6f 41 38 54 49 e6XiAooj7j1oA8TI 0030: 34 78 58 71 6f 3d 22 2c 72 65 61 6c 6d 3d 22 6c 4xXqo=",realm="l 0040: 6f 63 61 6c 68 6f 73 74 22 2c 71 6f 70 3d 22 61 ocalhost",qop="a 0050: 75 74 68 2c 61 75 74 68 2d 69 6e 74 2c 61 75 74 uth,auth-int,aut 0060: 68 2d 63 6f 6e 66 22 2c 63 69 70 68 65 72 3d 22 h-conf",cipher=" 0070: 72 63 34 2d 34 30 2c 72 63 34 2d 35 36 2c 72 63 rc4-40,rc4-56,rc 0080: 34 22 2c 6d 61 78 62 75 66 3d 36 35 35 33 36 2c 4",maxbuf=65536, 0090: 63 68 61 72 73 65 74 3d 75 74 66 2d 38 2c 61 6c charset=utf-8,al 00a0: 67 6f 72 69 74 68 6d 3d 6d 64 35 2d 73 65 73 73 gorithm=md5-sess ldap_parse_result ber_scanf fmt ({iAA) ber: ber_dump: buf=0x16a6f00 ptr=0x16a6f03 end=0x16a6fd9 len=214 0000: 61 81 d3 0a 01 0e 04 00 04 1c 53 41 53 4c 28 30 a.........SASL(0 0010: 29 3a 20 73 75 63 63 65 73 73 66 75 6c 20 72 65 ): successful re 0020: 73 75 6c 74 3a 20 87 81 ad 6e 6f 6e 63 65 3d 22 sult: ...nonce=" 0030: 4f 53 38 6d 31 32 77 6a 41 62 6d 2b 62 4e 50 67 OS8m12wjAbm+bNPg 0040: 6a 37 2b 48 53 6e 65 36 58 69 41 6f 6f 6a 37 6a j7+HSne6XiAooj7j 0050: 31 6f 41 38 54 49 34 78 58 71 6f 3d 22 2c 72 65 1oA8TI4xXqo=",re 0060: 61 6c 6d 3d 22 6c 6f 63 61 6c 68 6f 73 74 22 2c alm="localhost", 0070: 71 6f 70 3d 22 61 75 74 68 2c 61 75 74 68 2d 69 qop="auth,auth-i 0080: 6e 74 2c 61 75 74 68 2d 63 6f 6e 66 22 2c 63 69 nt,auth-conf",ci 0090: 70 68 65 72 3d 22 72 63 34 2d 34 30 2c 72 63 34 pher="rc4-40,rc4 00a0: 2d 35 36 2c 72 63 34 22 2c 6d 61 78 62 75 66 3d -56,rc4",maxbuf= 00b0: 36 35 35 33 36 2c 63 68 61 72 73 65 74 3d 75 74 65536,charset=ut 00c0: 66 2d 38 2c 61 6c 67 6f 72 69 74 68 6d 3d 6d 64 f-8,algorithm=md 00d0: 35 2d 73 65 73 73 5-sess ber_scanf fmt (x) ber: ber_dump: buf=0x16a6f00 ptr=0x16a6f29 end=0x16a6fd9 len=176 0000: 87 81 ad 6e 6f 6e 63 65 3d 22 4f 53 38 6d 31 32 ...nonce="OS8m12 0010: 77 6a 41 62 6d 2b 62 4e 50 67 6a 37 2b 48 53 6e wjAbm+bNPgj7+HSn 0020: 65 36 58 69 41 6f 6f 6a 37 6a 31 6f 41 38 54 49 e6XiAooj7j1oA8TI 0030: 34 78 58 71 6f 3d 22 2c 72 65 61 6c 6d 3d 22 6c 4xXqo=",realm="l 0040: 6f 63 61 6c 68 6f 73 74 22 2c 71 6f 70 3d 22 61 ocalhost",qop="a 0050: 75 74 68 2c 61 75 74 68 2d 69 6e 74 2c 61 75 74 uth,auth-int,aut 0060: 68 2d 63 6f 6e 66 22 2c 63 69 70 68 65 72 3d 22 h-conf",cipher=" 0070: 72 63 34 2d 34 30 2c 72 63 34 2d 35 36 2c 72 63 rc4-40,rc4-56,rc 0080: 34 22 2c 6d 61 78 62 75 66 3d 36 35 35 33 36 2c 4",maxbuf=65536, 0090: 63 68 61 72 73 65 74 3d 75 74 66 2d 38 2c 61 6c charset=utf-8,al 00a0: 67 6f 72 69 74 68 6d 3d 6d 64 35 2d 73 65 73 73 gorithm=md5-sess ber_scanf fmt (}) ber: ber_dump: buf=0x16a6f00 ptr=0x16a6fd9 end=0x16a6fd9 len=0 sasl_client_step: 2 Please enter your password: sasl_client_step: 1 ldap_sasl_bind ldap_send_initial_request ldap_send_server_request ber_scanf fmt ({it) ber: ber_dump: buf=0x16a6ff0 ptr=0x16a6ff0 end=0x16a7127 len=311 0000: 30 82 01 33 02 01 03 60 82 01 2c 02 01 03 04 00 0..3...`..,..... 0010: a3 82 01 23 04 0a 44 49 47 45 53 54 2d 4d 44 35 ...#..DIGEST-MD5 0020: 04 82 01 13 75 73 65 72 6e 61 6d 65 3d 22 6d 61 ....username="ma 0030: 74 74 40 65 78 61 6d 70 6c 65 2e 63 6f 6d 22 2c [email protected]", 0040: 72 65 61 6c 6d 3d 22 6c 6f 63 61 6c 68 6f 73 74 realm="localhost 0050: 22 2c 6e 6f 6e 63 65 3d 22 4f 53 38 6d 31 32 77 ",nonce="OS8m12w 0060: 6a 41 62 6d 2b 62 4e 50 67 6a 37 2b 48 53 6e 65 jAbm+bNPgj7+HSne 0070: 36 58 69 41 6f 6f 6a 37 6a 31 6f 41 38 54 49 34 6XiAooj7j1oA8TI4 0080: 78 58 71 6f 3d 22 2c 63 6e 6f 6e 63 65 3d 22 56 xXqo=",cnonce="V 0090: 53 69 37 74 49 66 2b 48 78 59 5a 35 2b 4e 48 44 Si7tIf+HxYZ5+NHD 00a0: 56 72 6c 6b 51 43 67 34 57 58 66 51 71 51 4c 33 VrlkQCg4WXfQqQL3 00b0: 52 53 36 6d 4c 64 7a 52 4f 34 3d 22 2c 6e 63 3d RS6mLdzRO4=",nc= 00c0: 30 30 30 30 30 30 30 31 2c 71 6f 70 3d 61 75 74 00000001,qop=aut 00d0: 68 2d 63 6f 6e 66 2c 63 69 70 68 65 72 3d 72 63 h-conf,cipher=rc 00e0: 34 2c 6d 61 78 62 75 66 3d 31 36 37 37 37 32 31 4,maxbuf=1677721 00f0: 35 2c 64 69 67 65 73 74 2d 75 72 69 3d 22 6c 64 5,digest-uri="ld 0100: 61 70 2f 6c 6f 63 61 6c 68 6f 73 74 22 2c 72 65 ap/localhost",re 0110: 73 70 6f 6e 73 65 3d 34 34 31 63 33 36 62 65 39 sponse=441c36be9 0120: 63 63 31 34 37 64 39 37 30 65 35 37 34 31 37 35 cc147d970e574175 0130: 65 34 30 36 38 62 33 e4068b3 ber_scanf fmt ({i) ber: ber_dump: buf=0x16a6ff0 ptr=0x16a6ff7 end=0x16a7127 len=304 0000: 60 82 01 2c 02 01 03 04 00 a3 82 01 23 04 0a 44 `..,........#..D 0010: 49 47 45 53 54 2d 4d 44 35 04 82 01 13 75 73 65 IGEST-MD5....use 0020: 72 6e 61 6d 65 3d 22 6d 61 74 74 40 65 78 61 6d rname="matt@exam 0030: 70 6c 65 2e 63 6f 6d 22 2c 72 65 61 6c 6d 3d 22 ple.com",realm=" 0040: 6c 6f 63 61 6c 68 6f 73 74 22 2c 6e 6f 6e 63 65 localhost",nonce 0050: 3d 22 4f 53 38 6d 31 32 77 6a 41 62 6d 2b 62 4e ="OS8m12wjAbm+bN 0060: 50 67 6a 37 2b 48 53 6e 65 36 58 69 41 6f 6f 6a Pgj7+HSne6XiAooj 0070: 37 6a 31 6f 41 38 54 49 34 78 58 71 6f 3d 22 2c 7j1oA8TI4xXqo=", 0080: 63 6e 6f 6e 63 65 3d 22 56 53 69 37 74 49 66 2b cnonce="VSi7tIf+ 0090: 48 78 59 5a 35 2b 4e 48 44 56 72 6c 6b 51 43 67 HxYZ5+NHDVrlkQCg 00a0: 34 57 58 66 51 71 51 4c 33 52 53 36 6d 4c 64 7a 4WXfQqQL3RS6mLdz 00b0: 52 4f 34 3d 22 2c 6e 63 3d 30 30 30 30 30 30 30 RO4=",nc=0000000 00c0: 31 2c 71 6f 70 3d 61 75 74 68 2d 63 6f 6e 66 2c 1,qop=auth-conf, 00d0: 63 69 70 68 65 72 3d 72 63 34 2c 6d 61 78 62 75 cipher=rc4,maxbu 00e0: 66 3d 31 36 37 37 37 32 31 35 2c 64 69 67 65 73 f=16777215,diges 00f0: 74 2d 75 72 69 3d 22 6c 64 61 70 2f 6c 6f 63 61 t-uri="ldap/loca 0100: 6c 68 6f 73 74 22 2c 72 65 73 70 6f 6e 73 65 3d lhost",response= 0110: 34 34 31 63 33 36 62 65 39 63 63 31 34 37 64 39 441c36be9cc147d9 0120: 37 30 65 35 37 34 31 37 35 65 34 30 36 38 62 33 70e574175e4068b3 ber_flush2: 311 bytes to sd 3 0000: 30 82 01 33 02 01 03 60 82 01 2c 02 01 03 04 00 0..3...`..,..... 0010: a3 82 01 23 04 0a 44 49 47 45 53 54 2d 4d 44 35 ...#..DIGEST-MD5 0020: 04 82 01 13 75 73 65 72 6e 61 6d 65 3d 22 6d 61 ....username="ma 0030: 74 74 40 65 78 61 6d 70 6c 65 2e 63 6f 6d 22 2c [email protected]", 0040: 72 65 61 6c 6d 3d 22 6c 6f 63 61 6c 68 6f 73 74 realm="localhost 0050: 22 2c 6e 6f 6e 63 65 3d 22 4f 53 38 6d 31 32 77 ",nonce="OS8m12w 0060: 6a 41 62 6d 2b 62 4e 50 67 6a 37 2b 48 53 6e 65 jAbm+bNPgj7+HSne 0070: 36 58 69 41 6f 6f 6a 37 6a 31 6f 41 38 54 49 34 6XiAooj7j1oA8TI4 0080: 78 58 71 6f 3d 22 2c 63 6e 6f 6e 63 65 3d 22 56 xXqo=",cnonce="V 0090: 53 69 37 74 49 66 2b 48 78 59 5a 35 2b 4e 48 44 Si7tIf+HxYZ5+NHD 00a0: 56 72 6c 6b 51 43 67 34 57 58 66 51 71 51 4c 33 VrlkQCg4WXfQqQL3 00b0: 52 53 36 6d 4c 64 7a 52 4f 34 3d 22 2c 6e 63 3d RS6mLdzRO4=",nc= 00c0: 30 30 30 30 30 30 30 31 2c 71 6f 70 3d 61 75 74 00000001,qop=aut 00d0: 68 2d 63 6f 6e 66 2c 63 69 70 68 65 72 3d 72 63 h-conf,cipher=rc 00e0: 34 2c 6d 61 78 62 75 66 3d 31 36 37 37 37 32 31 4,maxbuf=1677721 00f0: 35 2c 64 69 67 65 73 74 2d 75 72 69 3d 22 6c 64 5,digest-uri="ld 0100: 61 70 2f 6c 6f 63 61 6c 68 6f 73 74 22 2c 72 65 ap/localhost",re 0110: 73 70 6f 6e 73 65 3d 34 34 31 63 33 36 62 65 39 sponse=441c36be9 0120: 63 63 31 34 37 64 39 37 30 65 35 37 34 31 37 35 cc147d970e574175 0130: 65 34 30 36 38 62 33 e4068b3 ldap_write: want=311, written=311 0000: 30 82 01 33 02 01 03 60 82 01 2c 02 01 03 04 00 0..3...`..,..... 0010: a3 82 01 23 04 0a 44 49 47 45 53 54 2d 4d 44 35 ...#..DIGEST-MD5 0020: 04 82 01 13 75 73 65 72 6e 61 6d 65 3d 22 6d 61 ....username="ma 0030: 74 74 40 65 78 61 6d 70 6c 65 2e 63 6f 6d 22 2c [email protected]", 0040: 72 65 61 6c 6d 3d 22 6c 6f 63 61 6c 68 6f 73 74 realm="localhost 0050: 22 2c 6e 6f 6e 63 65 3d 22 4f 53 38 6d 31 32 77 ",nonce="OS8m12w 0060: 6a 41 62 6d 2b 62 4e 50 67 6a 37 2b 48 53 6e 65 jAbm+bNPgj7+HSne 0070: 36 58 69 41 6f 6f 6a 37 6a 31 6f 41 38 54 49 34 6XiAooj7j1oA8TI4 0080: 78 58 71 6f 3d 22 2c 63 6e 6f 6e 63 65 3d 22 56 xXqo=",cnonce="V 0090: 53 69 37 74 49 66 2b 48 78 59 5a 35 2b 4e 48 44 Si7tIf+HxYZ5+NHD 00a0: 56 72 6c 6b 51 43 67 34 57 58 66 51 71 51 4c 33 VrlkQCg4WXfQqQL3 00b0: 52 53 36 6d 4c 64 7a 52 4f 34 3d 22 2c 6e 63 3d RS6mLdzRO4=",nc= 00c0: 30 30 30 30 30 30 30 31 2c 71 6f 70 3d 61 75 74 00000001,qop=aut 00d0: 68 2d 63 6f 6e 66 2c 63 69 70 68 65 72 3d 72 63 h-conf,cipher=rc 00e0: 34 2c 6d 61 78 62 75 66 3d 31 36 37 37 37 32 31 4,maxbuf=1677721 00f0: 35 2c 64 69 67 65 73 74 2d 75 72 69 3d 22 6c 64 5,digest-uri="ld 0100: 61 70 2f 6c 6f 63 61 6c 68 6f 73 74 22 2c 72 65 ap/localhost",re 0110: 73 70 6f 6e 73 65 3d 34 34 31 63 33 36 62 65 39 sponse=441c36be9 0120: 63 63 31 34 37 64 39 37 30 65 35 37 34 31 37 35 cc147d970e574175 0130: 65 34 30 36 38 62 33 e4068b3 ldap_msgfree ldap_result ld 0x16993b0 msgid 3 wait4msg ld 0x16993b0 msgid 3 (infinite timeout) wait4msg continue ld 0x16993b0 msgid 3 all 1 ** ld 0x16993b0 Connections: * host: localhost port: 389 (default) refcnt: 2 status: Connected last used: Sat Nov 5 14:10:16 2016 ** ld 0x16993b0 Outstanding Requests: * msgid 3, origid 3, status InProgress outstanding referrals 0, parent count 0 ld 0x16993b0 request count 1 (abandoned 0) ** ld 0x16993b0 Response Queue: Empty ld 0x16993b0 response count 0 ldap_chkResponseList ld 0x16993b0 msgid 3 all 1 ldap_chkResponseList returns ld 0x16993b0 NULL ldap_int_select read1msg: ld 0x16993b0 msgid 3 all 1 ber_get_next ldap_read: want=8, got=8 0000: 30 4f 02 01 03 61 4a 0a 0O...aJ. ldap_read: want=73, got=73 0000: 01 50 04 00 04 43 53 41 53 4c 28 2d 31 29 3a 20 .P...CSASL(-1): 0010: 67 65 6e 65 72 69 63 20 66 61 69 6c 75 72 65 3a generic failure: 0020: 20 75 6e 61 62 6c 65 20 74 6f 20 63 61 6e 6f 6e unable to canon 0030: 69 66 79 20 75 73 65 72 20 61 6e 64 20 67 65 74 ify user and get 0040: 20 61 75 78 70 72 6f 70 73 auxprops ber_get_next: tag 0x30 len 79 contents: ber_dump: buf=0x16a5e70 ptr=0x16a5e70 end=0x16a5ebf len=79 0000: 02 01 03 61 4a 0a 01 50 04 00 04 43 53 41 53 4c ...aJ..P...CSASL 0010: 28 2d 31 29 3a 20 67 65 6e 65 72 69 63 20 66 61 (-1): generic fa 0020: 69 6c 75 72 65 3a 20 75 6e 61 62 6c 65 20 74 6f ilure: unable to 0030: 20 63 61 6e 6f 6e 69 66 79 20 75 73 65 72 20 61 canonify user a 0040: 6e 64 20 67 65 74 20 61 75 78 70 72 6f 70 73 nd get auxprops read1msg: ld 0x16993b0 msgid 3 message type bind ber_scanf fmt ({eAA) ber: ber_dump: buf=0x16a5e70 ptr=0x16a5e73 end=0x16a5ebf len=76 0000: 61 4a 0a 01 50 04 00 04 43 53 41 53 4c 28 2d 31 aJ..P...CSASL(-1 0010: 29 3a 20 67 65 6e 65 72 69 63 20 66 61 69 6c 75 ): generic failu 0020: 72 65 3a 20 75 6e 61 62 6c 65 20 74 6f 20 63 61 re: unable to ca 0030: 6e 6f 6e 69 66 79 20 75 73 65 72 20 61 6e 64 20 nonify user and 0040: 67 65 74 20 61 75 78 70 72 6f 70 73 get auxprops read1msg: ld 0x16993b0 0 new referrals read1msg: mark request completed, ld 0x16993b0 msgid 3 request done: ld 0x16993b0 msgid 3 res_errno: 80, res_error: <SASL(-1): generic failure: unable to canonify user and get auxprops>, res_matched: <> ldap_free_request (origid 3, msgid 3) ldap_int_sasl_bind: <null> ldap_parse_sasl_bind_result ber_scanf fmt ({eAA) ber: ber_dump: buf=0x16a5e70 ptr=0x16a5e73 end=0x16a5ebf len=76 0000: 61 4a 0a 01 50 04 00 04 43 53 41 53 4c 28 2d 31 aJ..P...CSASL(-1 0010: 29 3a 20 67 65 6e 65 72 69 63 20 66 61 69 6c 75 ): generic failu 0020: 72 65 3a 20 75 6e 61 62 6c 65 20 74 6f 20 63 61 re: unable to ca 0030: 6e 6f 6e 69 66 79 20 75 73 65 72 20 61 6e 64 20 nonify user and 0040: 67 65 74 20 61 75 78 70 72 6f 70 73 get auxprops ldap_parse_result ber_scanf fmt ({iAA) ber: ber_dump: buf=0x16a5e70 ptr=0x16a5e73 end=0x16a5ebf len=76 0000: 61 4a 0a 01 50 04 00 04 43 53 41 53 4c 28 2d 31 aJ..P...CSASL(-1 0010: 29 3a 20 67 65 6e 65 72 69 63 20 66 61 69 6c 75 ): generic failu 0020: 72 65 3a 20 75 6e 61 62 6c 65 20 74 6f 20 63 61 re: unable to ca 0030: 6e 6f 6e 69 66 79 20 75 73 65 72 20 61 6e 64 20 nonify user and 0040: 67 65 74 20 61 75 78 70 72 6f 70 73 get auxprops ber_scanf fmt (}) ber: ber_dump: buf=0x16a5e70 ptr=0x16a5ebf end=0x16a5ebf len=0 ldap_msgfree ldap_err2string ldap_sasl_interactive_bind_s: Other (e.g., implementation specific) error (80) additional info: SASL(-1): generic failure: unable to canonify user and get auxprops ldap_free_connection 1 1 ldap_send_unbind ber_flush2: 7 bytes to sd 3 0000: 30 05 02 01 04 42 00 0....B. ldap_write: want=7, written=7 0000: 30 05 02 01 04 42 00 0....B. ldap_free_connection: actually freed --------------------------------------------------------------------------------------------------------------------------------- --------------------------------------------------------------------------------------------------------------------------------- --------------------------------------------------------------------------------------------------------------------------------- #1 [root@localhost openldap]# sasldblistusers2 [email protected]: userPassword --------------------------------------------------------------------------------------------------------------------------------- --------------------------------------------------------------------------------------------------------------------------------- --------------------------------------------------------------------------------------------------------------------------------- #2 [root@localhost openldap]# pluginviewer -a Installed and properly configured auxprop mechanisms are: <none> --------------------------------------------------------------------------------------------------------------------------------- --------------------------------------------------------------------------------------------------------------------------------- --------------------------------------------------------------------------------------------------------------------------------- #3 [root@localhost openldap]# chown -R openldap:openldap /var/lib/ldap [root@localhost openldap]# chmod -R 644 /var/lib/ldap [root@localhost openldap]# ls -la /var/lib/ldap total 19140 drwSr-Sr--. 2 openldap openldap 4096 Nov 5 14:24 . drwxr-xr-x. 37 root root 4096 Nov 5 13:31 .. -rw-r--r--. 1 openldap openldap 2048 Nov 5 14:24 alock -rw-r--r--. 1 openldap openldap 2326528 Nov 5 14:25 __db.001 -rw-r--r--. 1 openldap openldap 17448960 Nov 5 14:25 __db.002 -rw-r--r--. 1 openldap openldap 1884160 Nov 5 14:25 __db.003 -rw-r--r--. 1 openldap openldap 845 Nov 5 13:31 DB_CONFIG -rw-r--r--. 1 openldap openldap 8192 Nov 5 13:39 dn2id.bdb -rw-r--r--. 1 openldap openldap 32768 Nov 5 13:39 id2entry.bdb -rw-r--r--. 1 openldap openldap 10485760 Nov 5 14:24 log.0000000001 --------------------------------------------------------------------------------------------------------------------------------- --------------------------------------------------------------------------------------------------------------------------------- --------------------------------------------------------------------------------------------------------------------------------- #4 [root@localhost openldap]# db_dump -p /etc/sasldb2 VERSION=3 format=print type=hash db_pagesize=4096 HEADER=END matt\00example.com\00userPassword secret DATA=END --------------------------------------------------------------------------------------------------------------------------------- --------------------------------------------------------------------------------------------------------------------------------- --------------------------------------------------------------------------------------------------------------------------------- #5 vi /etc/sasl2/slapd.conf mech_list: DIGEST-MD5 pwcheck_method:saslauthd sasldb_path: /etc/sasldb2 auxprop_plugin: sasldb -- best regards mark gavrilman