Re: Authenticate

Hasse Hagen Johansen <[email protected]> Fri, 01 Jul 2011 15:12:28 +0200

Newsgroups	gmane.mail.qmail.ldap
Message-ID	<[email protected]>

>>>>> "Friedrich" == Friedrich Locke <[email protected]> writes:

    Friedrich> I got this working for ldap server.  I can log into the
    Friedrich> openldap server using GSSAPI (-Y flag) and simple bind
    Friedrich> (userPassword: {SASL}[email protected]) and it works ok by
    Friedrich> both methods.  But for {SASL}xyz to work i had to write
    Friedrich> "pwcheck_method: saslauthd" into
    Friedrich> /usr/local/lib/sasl2/slapd.conf.

    Friedrich> Is it necessary to create configuration files for qmail
    Friedrich> (pop3,smtp, ...) inside /usr/local/lib/sasl2/ for each of
    Friedrich> qmail services ? Or what i have done for slapd is enough?

No. The qmail-ldap daemons will look up the information in the ldap
server. The ldap server will then ask as a SASL client the server which
the SASL configuration is telling it. So you have to configure the ldap
server as a SASL client to the server which you will ask over SASL
(which also can be itself)

Best Regards
Hasse Hagen Johansen