OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Re: openldap+sasl or not?

From: Per olof Ljungmark (peointersonic.se)
Date: Sat Apr 02 2005 - 06:51:52 CST


sam wun wrote:
.
.

>>
> Should I build sasl with ldap support instead?
>
> Thanks
> Sam
>
You should compile saslauthd with ldap support if you plan to use it to
authenticate against a ldap database. Openldap does not need to be
compiled with sasl, although this can be necessary for other purposes
but not in this setup.

You need a couple of configuration files also for this purpose, here's
how ours look:

/usr/local/lib/sasl2/smtpd.conf:
pwcheck_method: saslauthd
mech_list: plain login

/usr/local/etc/saslauthd.conf:
ldap_servers: ldap://ip-of-ldap-server1 ldap://ip-of-ldap-server2
ldap_version: 3
ldap_search_base: dn=<your-search-base>

HTH,
Per olof