Re: same SASL config that works on CentOS5 & 6 fails on CentOS7
Quanah Gibson-Mount <[email protected]> Fri, 28 Sep 2018 13:12:26 -0700
| Newsgroups | gmane.comp.security.cyrus.sasl |
|---|---|
| Message-ID | <A87A8579F6D45D729ABAB580@[192.168.1.39]> |
--On Friday, September 28, 2018 4:58 PM -0400 Paul Raines <[email protected]> wrote: > Running 'host ldap.foobar.org' on the C6 and C7 machine both return the > exact same four lines/IPs. Reverse DNS of the 4 IPs using the host > command is also the same on both C6 and C7 machines. It really looks > like OpenLDAP is > just not doing the reverse DNS on C7 when building the MD5 digest Hi Paul, Again, as I stated, there have been no changes to OpenLDAP in this area. Additionally, OpenLDAP leverages cyrus-sasl for SASL mechanism negotiations. The culprit most likely would be a change in the version of cyrus-sasl being used between C5/C6 and C7. c7 has: 2.1.26-23.el7 c6 has: 2.1.23-15.el6_6.2 Warm regards, Quanah -- Quanah Gibson-Mount Product Architect Symas Corporation Packaged, certified, and supported LDAP solutions powered by OpenLDAP: <http://www.symas.com>