saslauthd 配置后端使用ldap服务器的问题

mahao_boy

根据官方文档, 我先配置了/usr/lib64/sasl2/slapd.conf
mech_list: plain
pwcheck_method: saslauthd
saslauthd_path: /var/run/sasl2/mux

然后配置了/etc/saslauthd.conf
ldap_servers: ldap://lcoalhost

ldap_search_base: ou=People,ou=test,o=com"
ldap_filter: (uid=%u)

ldap_bind_dn: cn=admin,ou=SystemUsers,o=com
ldap_password: admin

然后启动saslauthd 在debug模式下

然后测试验证：
testsaslauthd -u user -p wrongpassword  

saslauthd[21563] :rel_accept_lock : released accept lock
saslauthd[21564] :get_accept_lock : acquired accept lock
saslauthd[21563] :do_auth         : auth failure: [user=user] [service=imap] [realm=] [mech=ldap] [reason=Unknown]
saslauthd[21563] :do_request      : response: NO


不管换什么用户都是错误的。

而且为什么“service=imap”?

各位大侠帮忙啊

mahao_boy

还有/etc/sysconfig/saslauthd 的配置
# Directory in which to place saslauthd's listening socket, pid file, and so
# on.  This directory must already exist.
SOCKETDIR=/var/run/saslauthd

# Mechanism to use when checking passwords.  Run "saslauthd -v" to get a list
# of which mechanism your installation was compiled with the ablity to use.
#MECH=pam
MECH=ldap

# Additional flags to pass to saslauthd on the command line.  See saslauthd(
# for the list of accepted flags.
FLAGS=

mahao_boy

根据官方文档, 我先配置了/usr/lib64/sasl2/slapd.conf
mech_list: plain
pwcheck_method: saslauthd
s ...
mahao_boy 发表于 2011-08-17 15:09

   

对不起观众啊，这句写错了

ldap_search_base: ou=People,ou=test,o=com"

多了一个引号。
浪费了我一下午时间。

呵呵

大家引以为戒啊。