failure to auth {SASL}user@DOMAIN; may some charity soul enlight me?

[Friedrich Locke]

Hi folks,

i am trying to get my qmail-ldap working but no success so far. The problem
is i cannot auth via a userpassword attribute with the {SASL}***@DOMAIN;
this is a sasl "password". saslauthd logs show nothing about any attempt: i
guess qmail is not even touch sasl. Why ?

Here you have an example:

obsd# ./qmail-ldaplookup -u grios -p
123456
Searching ldap for: (&(objectClass=qmailuser)(uid=grios))
under dn: ou=people,dc=ufv,dc=br
Found 1 entry:

dn: uid=grios,ou=people,dc=ufv,dc=br
-------------------------------------------------------
objectClass: organizationalRole
objectClass: posixAccount
objectClass: qmailUser
mail: ***@obsd.cpd.ufv.br
mailAlternateAddress: ***@obsd.cpd.ufv.br
uid: grios
accountStatus: undefined -> active
mailHost: obsd.cpd.ufv.br
homeDirectory: /var/pop/grios
aliasEmpty: using default
qmailDotMode: dotonly
qmailUID: 1016
qmailGID: 1010
mailQuotaSize: 1000000
mailQuotaCount: 1000
mailSizeMax: 0 (unlimited)
mailReplyText: undefined

PASSWORD COMPARE was NOT successful.
error was: authorization failed, wrong password


As you can see, the program are linked with the libraries


obsd# ldd
qmail-ldaplookup
qmail-ldaplookup:
Start End Type Open Ref GrpRef Name
000018ca56700000 000018ca56b16000 exe 1 0 0
qmail-ldaplookup
000018cc60e47000 000018cc6128d000 rlib 0 1 0
/usr/local/lib/libldap.so.13.0
000018cc59ad0000 000018cc59ede000 rlib 0 2 0
/usr/local/lib/liblber.so.12.0
000018cc5ba7d000 000018cc5bf66000 rlib 0 1 0
/usr/lib/libc.so.69.0
000018cc590a9000 000018cc594c4000 rlib 0 1 0
/usr/local/lib/libsasl2.so.3.0
000018cc56900000 000018cc56d2f000 rlib 0 2 0
/usr/lib/libgssapi.so.6.0
000018cc64958000 000018cc64dc5000 rlib 0 2 0
/usr/lib/libkrb5.so.19.0
000018cc5d64e000 000018cc5daca000 rlib 0 2 0
/usr/lib/libasn1.so.19.0
000018cc5eb74000 000018cc5ef9c000 rlib 0 2 0
/usr/lib/libwind.so.0.0
000018cc59659000 000018cc59a6a000 rlib 0 2 0
/usr/lib/libroken.so.0.0
000018cc656c7000 000018cc65ac9000 rlib 0 2 0
/usr/lib/libcom_err.so.19.0
000018cc5f3d6000 000018cc5f7da000 rlib 0 2 0
/usr/lib/libheimbase.so.0.0
000018cc58c4b000 000018cc590a9000 rlib 0 1 0
/usr/lib/libssl.so.19.0
000018cc5cd54000 000018cc5d30e000 rlib 0 2 0
/usr/lib/libcrypto.so.22.0
000018cc5c500000 000018cc5c500000 rtld 0 1 0
/usr/libexec/ld.so
obsd#
obsd# ldd
auth_pop
auth_pop:
Start End Type Open Ref GrpRef Name
000017cb1c100000 000017cb1c517000 exe 1 0 0 auth_pop
000017cd2b3b9000 000017cd2b7ff000 rlib 0 1 0
/usr/local/lib/libldap.so.13.0
000017cd244de000 000017cd248ec000 rlib 0 2 0
/usr/local/lib/liblber.so.12.0
000017cd2702e000 000017cd27517000 rlib 0 1 0
/usr/lib/libc.so.69.0
000017cd20448000 000017cd20863000 rlib 0 1 0
/usr/local/lib/libsasl2.so.3.0
000017cd2af2c000 000017cd2b35b000 rlib 0 2 0
/usr/lib/libgssapi.so.6.0
000017cd20863000 000017cd20cd0000 rlib 0 2 0
/usr/lib/libkrb5.so.19.0
000017cd1d1b7000 000017cd1d633000 rlib 0 2 0
/usr/lib/libasn1.so.19.0
000017cd1f806000 000017cd1fc2e000 rlib 0 2 0
/usr/lib/libwind.so.0.0
000017cd24ca5000 000017cd250b6000 rlib 0 2 0
/usr/lib/libroken.so.0.0
000017cd27e10000 000017cd28212000 rlib 0 2 0
/usr/lib/libcom_err.so.19.0
000017cd1f1ab000 000017cd1f5af000 rlib 0 2 0
/usr/lib/libheimbase.so.0.0
000017cd2b7ff000 000017cd2bc5d000 rlib 0 1 0
/usr/lib/libssl.so.19.0
000017cd20cd0000 000017cd2128a000 rlib 0 2 0
/usr/lib/libcrypto.so.22.0
000017cd1c800000 000017cd1c800000 rtld 0 1 0
/usr/libexec/ld.so
obsd#

[Claudio Jeker]

Post by Friedrich Locke
Hi folks,
i am trying to get my qmail-ldap working but no success so far. The problem
this is a sasl "password". saslauthd logs show nothing about any attempt: i
guess qmail is not even touch sasl. Why ?

qmail-ldap only support simple bind.

[Friedrich Locke]

Excuse me, but why to link the programs (not all qmail-ldap programs) with
support to SASL ?

Thanks.

Post by Friedrich Locke

Post by Friedrich Locke
Hi folks,
i am trying to get my qmail-ldap working but no success so far. The

problem
;

Post by Friedrich Locke
this is a sasl "password". saslauthd logs show nothing about any

attempt: i

Post by Friedrich Locke
guess qmail is not even touch sasl. Why ?

qmail-ldap only support simple bind.
--
:wq Claudio