What to do for SASL to ldap?

Alexander Gran alexg at moduleworks.com
Wed Apr 21 18:40:25 CEST 2010


Hi,

after screening crazy amounts of google results, I seem to understand that 
currently kolabs ldap can't do SASL.
The reason is that SASL needs a clear text password from somewhere, but 
kolab just stores the SSHA password in the ldap tree. Therefore simple (non-
sasl) authentication works, as slapd get the password, applies the salt, 
hashes and compares, but there is no way to get sasl with that working.
In theory SASL PLAIN should work, but SASL gets confused by the stored SSHA 
hash.
Is there any chance to get that working? Perhaps at least plain (via ssl, 
obvoiusyl)? I don't like the idea to strore clear text passwords.

regards
Alex

-- 

Dipl. Inform. Alexander Gran, MBA
alexg at moduleworks.com
http://www.moduleworks.com
SkypeID: mw_alexg
M: +49(0)163/5598933  

ModuleWorks GmbH
Ritterstraße 12a
52072 Aachen
HRB 11871
Amtsgericht Aachen
Geschäftsführer Yavuz Murtezaoglu

This message is for the designated recipient only and may contain
privileged, proprietary, or otherwise private information.
If you have received it in error, please notify the sender immediately
and delete the original.
Any other use of the email by you is prohibited.




More information about the users mailing list