[Fedora-directory-users] FDS ldapi autobind problem

Andrey Ivanov andrey.ivanov at polytechnique.fr
Mon Feb 23 14:30:34 UTC 2009


When i'm trying to connect to FDS (built from today's cvs) by ldapi as a
root (on RHEL5.2) i have the following error message :

ldapsearch -Y EXTERNAL -H
ldapi://%2fLocal%2fdirsrv%2fvar%2frun%2fslapd-dmz.socket  -b
"dc=id,dc=polytechnique,dc=edu" uid=toto
SASL/EXTERNAL authentication started
ldap_sasl_interactive_bind_s: Inappropriate authentication (48)
        additional info: SASL EXTERNAL bind requires an SSL connection

the access log :
[23/Feb/2009:15:22:38 +0100] conn=1 fd=128 slot=128 connection from
localhost to localhost
[23/Feb/2009:15:22:38 +0100] conn=1 op=0 BIND dn="" method=sasl version=3
[23/Feb/2009:15:22:38 +0100] conn=1 op=0 RESULT err=48 tag=97 nentries=0
[23/Feb/2009:15:22:38 +0100] conn=1 op=-1 fd=128 closed - B1

the dse.ldif lines:

nsslapd-ldapifilepath: /Local/dirsrv/var/run/slapd-dmz.socket
nsslapd-ldapilisten: on
nsslapd-ldapiautobind: on
nsslapd-ldapimaprootdn: cn=Directory Manager

Simple bind is ok (ldapsearch -x -H
ldapi://%2fLocal%2fdirsrv%2fvar%2frun%2fslapd-dmz.socket  -b
"dc=id,dc=polytechnique,dc=edu" uid=toto)
access log :
[23/Feb/2009:15:26:11 +0100] conn=3 fd=128 slot=128 connection from
localhost to localhost
[23/Feb/2009:15:26:12 +0100] conn=3 op=0 BIND dn="" method=128 version=3
[23/Feb/2009:15:26:12 +0100] conn=3 op=0 RESULT err=0 tag=97 nentries=0
etime=0.001000 dn=""
[23/Feb/2009:15:26:12 +0100] conn=3 op=1 SRCH
base="dc=id,dc=polytechnique,dc=edu" scope=2 filter="(uid=toto)" attrs=ALL
[23/Feb/2009:15:26:12 +0100] conn=3 op=1 RESULT err=0 tag=101 nentries=1
[23/Feb/2009:15:26:12 +0100] conn=3 op=2 UNBIND
[23/Feb/2009:15:26:12 +0100] conn=3 op=2 fd=128 closed - U1

What am i doing wrong in the first case (with EXTERNAL mechanism)? :)

Thank you!
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://listman.redhat.com/archives/fedora-directory-users/attachments/20090223/17135410/attachment.htm>

More information about the Fedora-directory-users mailing list