failure to auth {SASL}user@DOMAIN; may some charity soul enlight me?
Friedrich Locke <[email protected]> Thu, 10 Apr 2014 11:34:48 -0300
| Newsgroups | gmane.mail.qmail.ldap |
|---|---|
| Message-ID | <CANMDHqcBBfmGEUc0Ab3PedUG8sqfttWUSEmsTbPizBrvcPZ5vg@mail.gmail.com> |
--001a1133e8ec876a8d04f6b11ed0
Content-Type: text/plain; charset=ISO-8859-1
Hi folks,
i am trying to get my qmail-ldap working but no success so far. The problem
is i cannot auth via a userpassword attribute with the {SASL}user@DOMAIN;
this is a sasl "password". saslauthd logs show nothing about any attempt: i
guess qmail is not even touch sasl. Why ?
Here you have an example:
obsd# ./qmail-ldaplookup -u grios -p
123456
Searching ldap for: (&(objectClass=qmailuser)(uid=grios))
under dn: ou=people,dc=ufv,dc=br
Found 1 entry:
dn: uid=grios,ou=people,dc=ufv,dc=br
-------------------------------------------------------
objectClass: organizationalRole
objectClass: posixAccount
objectClass: qmailUser
mail: [email protected]
mailAlternateAddress: [email protected]
uid: grios
accountStatus: undefined -> active
mailHost: obsd.cpd.ufv.br
homeDirectory: /var/pop/grios
aliasEmpty: using default
qmailDotMode: dotonly
qmailUID: 1016
qmailGID: 1010
mailQuotaSize: 1000000
mailQuotaCount: 1000
mailSizeMax: 0 (unlimited)
mailReplyText: undefined
PASSWORD COMPARE was NOT successful.
error was: authorization failed, wrong password
As you can see, the program are linked with the libraries
obsd# ldd
qmail-ldaplookup
qmail-ldaplookup:
Start End Type Open Ref GrpRef Name
000018ca56700000 000018ca56b16000 exe 1 0 0
qmail-ldaplookup
000018cc60e47000 000018cc6128d000 rlib 0 1 0
/usr/local/lib/libldap.so.13.0
000018cc59ad0000 000018cc59ede000 rlib 0 2 0
/usr/local/lib/liblber.so.12.0
000018cc5ba7d000 000018cc5bf66000 rlib 0 1 0
/usr/lib/libc.so.69.0
000018cc590a9000 000018cc594c4000 rlib 0 1 0
/usr/local/lib/libsasl2.so.3.0
000018cc56900000 000018cc56d2f000 rlib 0 2 0
/usr/lib/libgssapi.so.6.0
000018cc64958000 000018cc64dc5000 rlib 0 2 0
/usr/lib/libkrb5.so.19.0
000018cc5d64e000 000018cc5daca000 rlib 0 2 0
/usr/lib/libasn1.so.19.0
000018cc5eb74000 000018cc5ef9c000 rlib 0 2 0
/usr/lib/libwind.so.0.0
000018cc59659000 000018cc59a6a000 rlib 0 2 0
/usr/lib/libroken.so.0.0
000018cc656c7000 000018cc65ac9000 rlib 0 2 0
/usr/lib/libcom_err.so.19.0
000018cc5f3d6000 000018cc5f7da000 rlib 0 2 0
/usr/lib/libheimbase.so.0.0
000018cc58c4b000 000018cc590a9000 rlib 0 1 0
/usr/lib/libssl.so.19.0
000018cc5cd54000 000018cc5d30e000 rlib 0 2 0
/usr/lib/libcrypto.so.22.0
000018cc5c500000 000018cc5c500000 rtld 0 1 0
/usr/libexec/ld.so
obsd#
obsd# ldd
auth_pop
auth_pop:
Start End Type Open Ref GrpRef Name
000017cb1c100000 000017cb1c517000 exe 1 0 0 auth_pop
000017cd2b3b9000 000017cd2b7ff000 rlib 0 1 0
/usr/local/lib/libldap.so.13.0
000017cd244de000 000017cd248ec000 rlib 0 2 0
/usr/local/lib/liblber.so.12.0
000017cd2702e000 000017cd27517000 rlib 0 1 0
/usr/lib/libc.so.69.0
000017cd20448000 000017cd20863000 rlib 0 1 0
/usr/local/lib/libsasl2.so.3.0
000017cd2af2c000 000017cd2b35b000 rlib 0 2 0
/usr/lib/libgssapi.so.6.0
000017cd20863000 000017cd20cd0000 rlib 0 2 0
/usr/lib/libkrb5.so.19.0
000017cd1d1b7000 000017cd1d633000 rlib 0 2 0
/usr/lib/libasn1.so.19.0
000017cd1f806000 000017cd1fc2e000 rlib 0 2 0
/usr/lib/libwind.so.0.0
000017cd24ca5000 000017cd250b6000 rlib 0 2 0
/usr/lib/libroken.so.0.0
000017cd27e10000 000017cd28212000 rlib 0 2 0
/usr/lib/libcom_err.so.19.0
000017cd1f1ab000 000017cd1f5af000 rlib 0 2 0
/usr/lib/libheimbase.so.0.0
000017cd2b7ff000 000017cd2bc5d000 rlib 0 1 0
/usr/lib/libssl.so.19.0
000017cd20cd0000 000017cd2128a000 rlib 0 2 0
/usr/lib/libcrypto.so.22.0
000017cd1c800000 000017cd1c800000 rtld 0 1 0
/usr/libexec/ld.so
obsd#
--001a1133e8ec876a8d04f6b11ed0
Content-Type: text/html; charset=ISO-8859-1
Content-Transfer-Encoding: quoted-printable
<div dir=3D"ltr"><div><div>Hi folks,<br><br></div>i am trying to get my qma=
il-ldap working but no success so far. The problem is i cannot auth via a u=
serpassword attribute with the {SASL}user@DOMAIN; this is a sasl "pass=
word". saslauthd logs show nothing about any attempt: i guess qmail is=
not even touch sasl. Why ?<br>
<br></div><div>Here you have an example:<br><br>obsd# ./qmail-ldaplookup -u=
grios -p 123456=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=
=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0 <br>Searching ldap for: (&=
amp;(objectClass=3Dqmailuser)(uid=3Dgrios))<br>under dn: ou=3Dpeople,dc=3Du=
fv,dc=3Dbr<br>
Found 1 entry:<br><br>dn: uid=3Dgrios,ou=3Dpeople,dc=3Dufv,dc=3Dbr<br>-----=
--------------------------------------------------<br>objectClass: organiza=
tionalRole<br>objectClass: posixAccount<br>objectClass: qmailUser<br>mail: =
<a href=3D"mailto:[email protected]">[email protected]=
r</a><br>
mailAlternateAddress: <a href=3D"mailto:[email protected]">[email protected]=
pd.ufv.br</a><br>uid: grios<br>accountStatus: undefined -> active<br>mai=
lHost: <a href=3D"http://obsd.cpd.ufv.br">obsd.cpd.ufv.br</a><br>homeDirect=
ory: /var/pop/grios<br>
aliasEmpty: using default<br>qmailDotMode: dotonly<br>qmailUID: 1016<br>qma=
ilGID: 1010<br>mailQuotaSize: 1000000<br>mailQuotaCount: 1000<br>mailSizeMa=
x: 0 (unlimited)<br>mailReplyText: undefined<br><br>PASSWORD COMPARE was NO=
T successful.<br>
=A0=A0=A0=A0=A0=A0=A0 error was: authorization failed, wrong password<br><b=
r><br></div><div>As you can see, the program are linked with the libraries<=
br></div><div><br><br></div><div>obsd# ldd qmail-ldaplookup=A0=A0=A0=A0=A0=
=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=
=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0 <br>
qmail-ldaplookup:<br>=A0=A0=A0=A0=A0=A0=A0 Start=A0=A0=A0=A0=A0=A0=A0=A0=A0=
=A0=A0 End=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0 Type Open Ref GrpRef Name=
<br>=A0=A0=A0=A0=A0=A0=A0 000018ca56700000 000018ca56b16000 exe=A0 1=A0=A0=
=A0 0=A0=A0 0=A0=A0=A0=A0=A0 qmail-ldaplookup<br>=A0=A0=A0=A0=A0=A0=A0 0000=
18cc60e47000 000018cc6128d000 rlib 0=A0=A0=A0 1=A0=A0 0=A0=A0=A0=A0=A0 /usr=
/local/lib/libldap.so.13.0<br>
=A0=A0=A0=A0=A0=A0=A0 000018cc59ad0000 000018cc59ede000 rlib 0=A0=A0=A0 2=
=A0=A0 0=A0=A0=A0=A0=A0 /usr/local/lib/liblber.so.12.0<br>=A0=A0=A0=A0=A0=
=A0=A0 000018cc5ba7d000 000018cc5bf66000 rlib 0=A0=A0=A0 1=A0=A0 0=A0=A0=A0=
=A0=A0 /usr/lib/libc.so.69.0<br>=A0=A0=A0=A0=A0=A0=A0 000018cc590a9000 0000=
18cc594c4000 rlib 0=A0=A0=A0 1=A0=A0 0=A0=A0=A0=A0=A0 /usr/local/lib/libsas=
l2.so.3.0<br>
=A0=A0=A0=A0=A0=A0=A0 000018cc56900000 000018cc56d2f000 rlib 0=A0=A0=A0 2=
=A0=A0 0=A0=A0=A0=A0=A0 /usr/lib/libgssapi.so.6.0<br>=A0=A0=A0=A0=A0=A0=A0 =
000018cc64958000 000018cc64dc5000 rlib 0=A0=A0=A0 2=A0=A0 0=A0=A0=A0=A0=A0 =
/usr/lib/libkrb5.so.19.0<br>=A0=A0=A0=A0=A0=A0=A0 000018cc5d64e000 000018cc=
5daca000 rlib 0=A0=A0=A0 2=A0=A0 0=A0=A0=A0=A0=A0 /usr/lib/libasn1.so.19.0<=
br>
=A0=A0=A0=A0=A0=A0=A0 000018cc5eb74000 000018cc5ef9c000 rlib 0=A0=A0=A0 2=
=A0=A0 0=A0=A0=A0=A0=A0 /usr/lib/libwind.so.0.0<br>=A0=A0=A0=A0=A0=A0=A0 00=
0018cc59659000 000018cc59a6a000 rlib 0=A0=A0=A0 2=A0=A0 0=A0=A0=A0=A0=A0 /u=
sr/lib/libroken.so.0.0<br>000018cc656c7000 000018cc65ac9000 rlib 0=A0=A0=A0=
2=A0=A0 0=A0=A0=A0=A0=A0 /usr/lib/libcom_err.so.19.0<br>
=A0=A0=A0=A0=A0=A0=A0 000018cc5f3d6000 000018cc5f7da000 rlib 0=A0=A0=A0 2=
=A0=A0 0=A0=A0=A0=A0=A0 /usr/lib/libheimbase.so.0.0<br>=A0=A0=A0=A0=A0=A0=
=A0 000018cc58c4b000 000018cc590a9000 rlib 0=A0=A0=A0 1=A0=A0 0=A0=A0=A0=A0=
=A0 /usr/lib/libssl.so.19.0<br>=A0=A0=A0=A0=A0=A0=A0 000018cc5cd54000 00001=
8cc5d30e000 rlib 0=A0=A0=A0 2=A0=A0 0=A0=A0=A0=A0=A0 /usr/lib/libcrypto.so.=
22.0<br>
=A0=A0=A0=A0=A0=A0=A0 000018cc5c500000 000018cc5c500000 rtld 0=A0=A0=A0 1=
=A0=A0 0=A0=A0=A0=A0=A0 /usr/libexec/ld.so<br>obsd# <br></div><div>obsd# ld=
d auth_pop=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=
=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=
=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0 <br>auth_pop:<br>=A0=A0=A0=A0=A0=
=A0=A0 Start=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0 End=A0=A0=A0=A0=A0=A0=A0=A0=
=A0=A0=A0=A0=A0 Type Open Ref GrpRef Name<br>
=A0=A0=A0=A0=A0=A0=A0 000017cb1c100000 000017cb1c517000 exe=A0 1=A0=A0=A0 0=
=A0=A0 0=A0=A0=A0=A0=A0 auth_pop<br>=A0=A0=A0=A0=A0=A0=A0 000017cd2b3b9000 =
000017cd2b7ff000 rlib 0=A0=A0=A0 1=A0=A0 0=A0=A0=A0=A0=A0 /usr/local/lib/li=
bldap.so.13.0<br>=A0=A0=A0=A0=A0=A0=A0 000017cd244de000 000017cd248ec000 rl=
ib 0=A0=A0=A0 2=A0=A0 0=A0=A0=A0=A0=A0 /usr/local/lib/liblber.so.12.0<br>
=A0=A0=A0=A0=A0=A0=A0 000017cd2702e000 000017cd27517000 rlib 0=A0=A0=A0 1=
=A0=A0 0=A0=A0=A0=A0=A0 /usr/lib/libc.so.69.0<br>=A0=A0=A0=A0=A0=A0=A0 0000=
17cd20448000 000017cd20863000 rlib 0=A0=A0=A0 1=A0=A0 0=A0=A0=A0=A0=A0 /usr=
/local/lib/libsasl2.so.3.0<br>=A0=A0=A0=A0=A0=A0=A0 000017cd2af2c000 000017=
cd2b35b000 rlib 0=A0=A0=A0 2=A0=A0 0=A0=A0=A0=A0=A0 /usr/lib/libgssapi.so.6=
.0<br>
=A0=A0=A0=A0=A0=A0=A0 000017cd20863000 000017cd20cd0000 rlib 0=A0=A0=A0 2=
=A0=A0 0=A0=A0=A0=A0=A0 /usr/lib/libkrb5.so.19.0<br>=A0=A0=A0=A0=A0=A0=A0 0=
00017cd1d1b7000 000017cd1d633000 rlib 0=A0=A0=A0 2=A0=A0 0=A0=A0=A0=A0=A0 /=
usr/lib/libasn1.so.19.0<br>=A0=A0=A0=A0=A0=A0=A0 000017cd1f806000 000017cd1=
fc2e000 rlib 0=A0=A0=A0 2=A0=A0 0=A0=A0=A0=A0=A0 /usr/lib/libwind.so.0.0<br=
>
=A0=A0=A0=A0=A0=A0=A0 000017cd24ca5000 000017cd250b6000 rlib 0=A0=A0=A0 2=
=A0=A0 0=A0=A0=A0=A0=A0 /usr/lib/libroken.so.0.0<br>=A0=A0=A0=A0=A0=A0=A0 0=
00017cd27e10000 000017cd28212000 rlib 0=A0=A0=A0 2=A0=A0 0=A0=A0=A0=A0=A0 /=
usr/lib/libcom_err.so.19.0<br>=A0=A0=A0=A0=A0=A0=A0 000017cd1f1ab000 000017=
cd1f5af000 rlib 0=A0=A0=A0 2=A0=A0 0=A0=A0=A0=A0=A0 /usr/lib/libheimbase.so=
.0.0<br>
=A0=A0=A0=A0=A0=A0=A0 000017cd2b7ff000 000017cd2bc5d000 rlib 0=A0=A0=A0 1=
=A0=A0 0=A0=A0=A0=A0=A0 /usr/lib/libssl.so.19.0<br>=A0=A0=A0=A0=A0=A0=A0 00=
0017cd20cd0000 000017cd2128a000 rlib 0=A0=A0=A0 2=A0=A0 0=A0=A0=A0=A0=A0 /u=
sr/lib/libcrypto.so.22.0<br>=A0=A0=A0=A0=A0=A0=A0 000017cd1c800000 000017cd=
1c800000 rtld 0=A0=A0=A0 1=A0=A0 0=A0=A0=A0=A0=A0 /usr/libexec/ld.so<br>
obsd# <br><br></div></div>
--001a1133e8ec876a8d04f6b11ed0--