Re: question: can I use libsasl.dll to delegate authentication to ldap server without saslauthd/srvtab
Dan White <[email protected]> Sun, 16 Jul 2017 00:15:34 -0500
| Newsgroups | gmane.comp.security.cyrus.sasl |
|---|---|
| Message-ID | <[email protected]> |
On 07/16/17Â 08:40Â +0800, comic fans wrote: >Hello everyone > currently I'm setting up a svnserver on windows platform, I'd >like to use sasl to delegate authentication to our ldap server( which >supports gssapi/gssapi spnego/external, but I don't have permission >to config nor operate on it). I've successfully test svnserve auth >with sasldb, but after reading sasl documents, I have: >1 to use gssapi with srvtab file which from ldap server, >2 to use ldapdb plugin with ldap server configured, >3 to use saslauthd (which didn't run on windows) > >I wonder if there is another way to do this ? any suggestion would be helpful . DIGEST-MD5 may be an option. Retrieve supportedSASLMechanisms from the root DSE to obtain a list of available mechanisms: ldapsearch -H ldaps://<fqdn> -x -b "" -s base -LLL supportedSASLMechanisms