hard times getting ldap to work with sasl

Hi folks,

after trying to get openldap + sasl working for 3 day i have loose my hairs.

My dns is working ok, openldap config too. But i am not able to get 
opendalp to auth via sasl kerberos or GSSAPI. When i try to auth via 
sasl or providing plain text password nothing is even show in saslauthd 
log files. It seems openldap does not even contact saslauthd.

Here is some examples :

sioux@etosha$ ldapsearch -Y GSSAPI -b "" -s base -LLL 
supportedSASLMechanisms
SASL/GSSAPI authentication started
ldap_sasl_interactive_bind_s: Other (e.g., implementation specific) 
error (80)
         additional info: SASL(-1): generic failure: GSSAPI Error:  No 
credentials were supplied, or the credentials were unavailable or 
inaccessible. (unknown mech-code 0 for mech unknown)
sioux@etosha$ uname -a
FreeBSD etosha 11.0-RELEASE-p8 FreeBSD 11.0-RELEASE-p8 #0: Wed Feb 22 
06:12:04 UTC 2017 
[email protected]:/usr/obj/usr/src/sys/GENERIC  amd64
sioux@etosha$ klist
Credentials cache: FILE:/tmp/krb5cc_Ofd7Gy
         Principal: [email protected]

   Issued                Expires               Principal
Jun 16 12:16:28 2017  Jun 16 16:16:28 2017  krbtgt/[email protected]
Jun 16 12:16:54 2017  Jun 16 16:16:28 2017  host/[email protected]
Jun 16 12:40:03 2017  Jun 16 16:16:28 2017  ldap/[email protected]
sioux@etosha$




The credentials are fetched from kerberos, by ldapsearch is prevented 
from log into slapd. And when i provide a user, saslauthd is not even 
contacted.


Please, someone help me ......
_______________________________________________
[email protected] mailing list
https://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[email protected]"