<html><head><style type="text/css"><!-- DIV {margin:0px;} --></style></head><body><div style="font-family:times new roman, new york, times, serif;font-size:12pt"><DIV>
<TABLE cellSpacing=0 cellPadding=0 border=0>
<TBODY>
<TR>
<TD vAlign=top>
<DIV>hi all,</DIV>
<DIV>i've got a problem with the sasl authentication using digest-md5 and<BR>multiple realms with my openldapServer 2.4.16 (fc9).</DIV>
<DIV>i want to be able to authenticate against different subtrees of the dit<BR>by using different realms and i was reading as many documentation,<BR>howtos and so on as i was able to find at the net for at least the last<BR>7 days. i don't get it running...!</DIV>
<DIV>currently, for testing, i use two different realms:</DIV>
<DIV> mydomain.net (o=home,dc=mydit,dc=lan)<BR> test.mydomain.net (o=test,dc=mydit,dc=lan)</DIV>
<DIV>in the slapd.conf i added:</DIV>
<DIV> # sasl-realm mydomain.net<BR> <BR> authz-regexp<BR> uid=(.*),cn=test.mydomain.net,cn=digest-md5,cn=auth<BR> uid=$1,ou=users,o=test,dc=ditroot</DIV>
<DIV> authz-regexp<BR> uid=(.*),cn=mydomain.net,cn=digest-md5,cn=auth<BR> uid=$1,ou=users,o=home,dc=ditroot</DIV>
<DIV> authz-regexp<BR> uid=(.*),cn=digest-md5,cn=auth<BR> uid=$1,ou=users,o=home,dc=ditroot</DIV>
<DIV>as you can see, the sasl-realm parameter is commented.<BR>whether or not i comment or uncomment it, it does not work.<BR>(actualy it works, but only either for the default realm or through the<BR>last sasl-regexp</DIV>
<DIV>if i set it, all authentication attemps are of the format:</DIV>
<DIV> uid=XY,cn=mydomain.net,cn=digest-md5,cn=auth</DIV>
<DIV>if i do not set it, all authentication is done using:</DIV>
<DIV> uid=XY,cn=digest-md5,cn=auth</DIV>
<DIV>i realy tried a lot, e.g.:<BR>(things like -h, ... are covered by the ldap.conf)</DIV>
<DIV> - ldapwhoami -U XY -R test.mydomain.net<BR> - ldapwhoami -U <A href="mailto:XY@test.mydomain.net" target=_blank rel=nofollow ymailto="mailto:XY@test.mydomain.net"><FONT color=#0000ff>XY@test.mydomain.net</FONT></A><BR> - ldapsearch -U XY -R test.mydomain.net<BR> - ldap...</DIV>
<DIV>of course all of those test where performed with different -R, ...<BR>values.</DIV>
<DIV>i realy do not know what to do anymore, i've got no more ideas...</DIV>
<DIV>also what i do not understand is whether or not this is a problem with<BR>my cyrus-sasl installation, but i cannot imagine that. i guess i'm<BR>missing something but i don't know what.<BR>Please help.</DIV>
<DIV> </DIV>
<DIV>Jack</DIV></TD></TR></TBODY></TABLE><BR></DIV></div><br>
<hr size=1><a href="http://cn.rd.yahoo.com/mail_cn/tagline/card/*http://card.mail.cn.yahoo.com/"> 好玩贺卡等你发，邮箱贺卡全新上线！</a></body></html>