<HTML><BODY>Hi experts,<br><br>I'm configuring openldap+sasl+samba for my company. I made a lot of googling without success Please assist me to resolve this issue. I have following when i run ldapsearch (*********after ldapsearch log i gave some additional configurations):<br><br><p>[root@example openldap]# ldapsearch -LLL -U matt@example.com -v '(uid=matt@example.com)' uid -d -1<br>ldap_initialize( <DEFAULT> )<br>ldap_create<br>ldap_pvt_sasl_getmech<br>ldap_search<br>put_filter: "(objectclass=*)"<br>put_filter: simple<br>put_simple_filter: "objectclass=*"<br>ldap_build_search_req ATTRS: supportedSASLMechanisms<br>ldap_send_initial_request<br>ldap_new_connection 1 1 0<br>ldap_int_open_connection<br>ldap_connect_to_host: TCP localhost:389<br>ldap_new_socket: 3<br>ldap_prepare_socket: 3<br>ldap_connect_to_host: Trying ::1 389<br>ldap_pvt_connect: fd: 3 tm: -1 async: 0<br>attempting to connect:<br>connect success<br>ldap_open_defconn: successful<br>ldap_send_server_request<br>ber_scanf fmt ({it) ber:<br>ber_dump: buf=0x16a1730 ptr=0x16a1730 end=0x16a1770 len=64<br> 0000: 30 3e 02 01 01 63 39 04 00 0a 01 00 0a 01 00 02 0>...c9.........<br> 0010: 01 00 02 01 00 01 01 00 87 0b 6f 62 6a 65 63 74 ..........object<br> 0020: 63 6c 61 73 73 30 19 04 17 73 75 70 70 6f 72 74 class0...support<br> 0030: 65 64 53 41 53 4c 4d 65 63 68 61 6e 69 73 6d 73 edSASLMechanisms<br>ber_scanf fmt ({) ber:<br>ber_dump: buf=0x16a1730 ptr=0x16a1735 end=0x16a1770 len=59<br> 0000: 63 39 04 00 0a 01 00 0a 01 00 02 01 00 02 01 00 c9..............<br> 0010: 01 01 00 87 0b 6f 62 6a 65 63 74 63 6c 61 73 73 .....objectclass<br> 0020: 30 19 04 17 73 75 70 70 6f 72 74 65 64 53 41 53 0...supportedSAS<br> 0030: 4c 4d 65 63 68 61 6e 69 73 6d 73 LMechanisms<br>ber_flush2: 64 bytes to sd 3<br> 0000: 30 3e 02 01 01 63 39 04 00 0a 01 00 0a 01 00 02 0>...c9.........<br> 0010: 01 00 02 01 00 01 01 00 87 0b 6f 62 6a 65 63 74 ..........object<br> 0020: 63 6c 61 73 73 30 19 04 17 73 75 70 70 6f 72 74 class0...support<br> 0030: 65 64 53 41 53 4c 4d 65 63 68 61 6e 69 73 6d 73 edSASLMechanisms<br>ldap_write: want=64, written=64<br> 0000: 30 3e 02 01 01 63 39 04 00 0a 01 00 0a 01 00 02 0>...c9.........<br> 0010: 01 00 02 01 00 01 01 00 87 0b 6f 62 6a 65 63 74 ..........object<br> 0020: 63 6c 61 73 73 30 19 04 17 73 75 70 70 6f 72 74 class0...support<br> 0030: 65 64 53 41 53 4c 4d 65 63 68 61 6e 69 73 6d 73 edSASLMechanisms<br>ldap_result ld 0x16993b0 msgid 1<br>wait4msg ld 0x16993b0 msgid 1 (infinite timeout)<br>wait4msg continue ld 0x16993b0 msgid 1 all 1<br>** ld 0x16993b0 Connections:<br>* host: localhost port: 389 (default)<br> refcnt: 2 status: Connected<br> last used: Sat Nov 5 14:10:08 2016</p><p><br>** ld 0x16993b0 Outstanding Requests:<br> * msgid 1, origid 1, status InProgress<br> outstanding referrals 0, parent count 0<br> ld 0x16993b0 request count 1 (abandoned 0)<br>** ld 0x16993b0 Response Queue:<br> Empty<br> ld 0x16993b0 response count 0<br>ldap_chkResponseList ld 0x16993b0 msgid 1 all 1<br>ldap_chkResponseList returns ld 0x16993b0 NULL<br>ldap_int_select<br>read1msg: ld 0x16993b0 msgid 1 all 1<br>ber_get_next<br>ldap_read: want=8, got=8<br> 0000: 30 32 02 01 01 64 2d 04 02...d-.<br>ldap_read: want=44, got=44<br> 0000: 00 30 29 30 27 04 17 73 75 70 70 6f 72 74 65 64 .0)0'..supported<br> 0010: 53 41 53 4c 4d 65 63 68 61 6e 69 73 6d 73 31 0c SASLMechanisms1.<br> 0020: 04 0a 44 49 47 45 53 54 2d 4d 44 35 ..DIGEST-MD5<br>ber_get_next: tag 0x30 len 50 contents:<br>ber_dump: buf=0x16a2be0 ptr=0x16a2be0 end=0x16a2c12 len=50<br> 0000: 02 01 01 64 2d 04 00 30 29 30 27 04 17 73 75 70 ...d-..0)0'..sup<br> 0010: 70 6f 72 74 65 64 53 41 53 4c 4d 65 63 68 61 6e portedSASLMechan<br> 0020: 69 73 6d 73 31 0c 04 0a 44 49 47 45 53 54 2d 4d isms1...DIGEST-M<br> 0030: 44 35 D5<br>read1msg: ld 0x16993b0 msgid 1 message type search-entry<br>wait4msg continue ld 0x16993b0 msgid 1 all 1<br>** ld 0x16993b0 Connections:<br>* host: localhost port: 389 (default)<br> refcnt: 2 status: Connected<br> last used: Sat Nov 5 14:10:08 2016</p><p><br>** ld 0x16993b0 Outstanding Requests:<br> * msgid 1, origid 1, status InProgress<br> outstanding referrals 0, parent count 0<br> ld 0x16993b0 request count 1 (abandoned 0)<br>** ld 0x16993b0 Response Queue:<br> * msgid 1, type 100<br> ld 0x16993b0 response count 1<br>ldap_chkResponseList ld 0x16993b0 msgid 1 all 1<br>ldap_chkResponseList returns ld 0x16993b0 NULL<br>ldap_int_select<br>read1msg: ld 0x16993b0 msgid 1 all 1<br>ber_get_next<br>ldap_read: want=8, got=8<br> 0000: 30 0c 02 01 01 65 07 0a 0....e..<br>ldap_read: want=6, got=6<br> 0000: 01 00 04 00 04 00 ......<br>ber_get_next: tag 0x30 len 12 contents:<br>ber_dump: buf=0x16a2cc0 ptr=0x16a2cc0 end=0x16a2ccc len=12<br> 0000: 02 01 01 65 07 0a 01 00 04 00 04 00 ...e........<br>read1msg: ld 0x16993b0 msgid 1 message type search-result<br>ber_scanf fmt ({eAA) ber:<br>ber_dump: buf=0x16a2cc0 ptr=0x16a2cc3 end=0x16a2ccc len=9<br> 0000: 65 07 0a 01 00 04 00 04 00 e........<br>read1msg: ld 0x16993b0 0 new referrals<br>read1msg: mark request completed, ld 0x16993b0 msgid 1<br>request done: ld 0x16993b0 msgid 1<br>res_errno: 0, res_error: <>, res_matched: <><br>ldap_free_request (origid 1, msgid 1)<br>adding response ld 0x16993b0 msgid 1 type 101:<br>ldap_parse_result<br>ber_scanf fmt ({iAA) ber:<br>ber_dump: buf=0x16a2cc0 ptr=0x16a2cc3 end=0x16a2ccc len=9<br> 0000: 65 07 0a 01 00 04 00 04 00 e........<br>ber_scanf fmt (}) ber:<br>ber_dump: buf=0x16a2cc0 ptr=0x16a2ccc end=0x16a2ccc len=0</p><p>ldap_get_values<br>ber_scanf fmt ({x{{a) ber:<br>ber_dump: buf=0x16a2be0 ptr=0x16a2be3 end=0x16a2c12 len=47<br> 0000: 64 2d 04 00 30 29 30 27 04 17 73 75 70 70 6f 72 d-..0)0'..suppor<br> 0010: 74 65 64 53 41 53 4c 4d 65 63 68 61 6e 69 73 6d tedSASLMechanism<br> 0020: 73 31 0c 04 0a 44 49 47 45 53 54 2d 4d 44 35 s1...DIGEST-MD5<br>ber_scanf fmt ([v]) ber:<br>ber_dump: buf=0x16a2be0 ptr=0x16a2c04 end=0x16a2c12 len=14<br> 0000: 31 0c 04 0a 44 49 47 45 53 54 2d 4d 44 35 1...DIGEST-MD5<br>ldap_msgfree<br>ldap_sasl_interactive_bind: server supports: DIGEST-MD5<br>ldap_int_sasl_bind: DIGEST-MD5<br>ldap_int_sasl_open: host=localhost<br>SASL/DIGEST-MD5 authentication started<br>ldap_sasl_bind<br>ldap_send_initial_request<br>ldap_send_server_request<br>ber_scanf fmt ({it) ber:<br>ber_dump: buf=0x16a5e20 ptr=0x16a5e20 end=0x16a5e3a len=26<br> 0000: 30 18 02 01 02 60 13 02 01 03 04 00 a3 0c 04 0a 0....`..........<br> 0010: 44 49 47 45 53 54 2d 4d 44 35 DIGEST-MD5<br>ber_scanf fmt ({i) ber:<br>ber_dump: buf=0x16a5e20 ptr=0x16a5e25 end=0x16a5e3a len=21<br> 0000: 60 13 02 01 03 04 00 a3 0c 04 0a 44 49 47 45 53 `..........DIGES<br> 0010: 54 2d 4d 44 35 T-MD5<br>ber_flush2: 26 bytes to sd 3<br> 0000: 30 18 02 01 02 60 13 02 01 03 04 00 a3 0c 04 0a 0....`..........<br> 0010: 44 49 47 45 53 54 2d 4d 44 35 DIGEST-MD5<br>ldap_write: want=26, written=26<br> 0000: 30 18 02 01 02 60 13 02 01 03 04 00 a3 0c 04 0a 0....`..........<br> 0010: 44 49 47 45 53 54 2d 4d 44 35 DIGEST-MD5<br>ldap_msgfree<br>ldap_result ld 0x16993b0 msgid 2<br>wait4msg ld 0x16993b0 msgid 2 (infinite timeout)<br>wait4msg continue ld 0x16993b0 msgid 2 all 1<br>** ld 0x16993b0 Connections:<br>* host: localhost port: 389 (default)<br> refcnt: 2 status: Connected<br> last used: Sat Nov 5 14:10:08 2016</p><p><br>** ld 0x16993b0 Outstanding Requests:<br> * msgid 2, origid 2, status InProgress<br> outstanding referrals 0, parent count 0<br> ld 0x16993b0 request count 1 (abandoned 0)<br>** ld 0x16993b0 Response Queue:<br> Empty<br> ld 0x16993b0 response count 0<br>ldap_chkResponseList ld 0x16993b0 msgid 2 all 1<br>ldap_chkResponseList returns ld 0x16993b0 NULL<br>ldap_int_select<br>read1msg: ld 0x16993b0 msgid 2 all 1<br>ber_get_next<br>ldap_read: want=8, got=8<br> 0000: 30 81 d9 02 01 02 61 81 0.....a.<br>ldap_read: want=212, got=212<br> 0000: d3 0a 01 0e 04 00 04 1c 53 41 53 4c 28 30 29 3a ........SASL(0):<br> 0010: 20 73 75 63 63 65 73 73 66 75 6c 20 72 65 73 75 successful resu<br> 0020: 6c 74 3a 20 87 81 ad 6e 6f 6e 63 65 3d 22 4f 53 lt: ...nonce="OS<br> 0030: 38 6d 31 32 77 6a 41 62 6d 2b 62 4e 50 67 6a 37 8m12wjAbm+bNPgj7<br> 0040: 2b 48 53 6e 65 36 58 69 41 6f 6f 6a 37 6a 31 6f +HSne6XiAooj7j1o<br> 0050: 41 38 54 49 34 78 58 71 6f 3d 22 2c 72 65 61 6c A8TI4xXqo=",real<br> 0060: 6d 3d 22 6c 6f 63 61 6c 68 6f 73 74 22 2c 71 6f m="localhost",qo<br> 0070: 70 3d 22 61 75 74 68 2c 61 75 74 68 2d 69 6e 74 p="auth,auth-int<br> 0080: 2c 61 75 74 68 2d 63 6f 6e 66 22 2c 63 69 70 68 ,auth-conf",ciph<br> 0090: 65 72 3d 22 72 63 34 2d 34 30 2c 72 63 34 2d 35 er="rc4-40,rc4-5<br> 00a0: 36 2c 72 63 34 22 2c 6d 61 78 62 75 66 3d 36 35 6,rc4",maxbuf=65<br> 00b0: 35 33 36 2c 63 68 61 72 73 65 74 3d 75 74 66 2d 536,charset=utf-<br> 00c0: 38 2c 61 6c 67 6f 72 69 74 68 6d 3d 6d 64 35 2d 8,algorithm=md5-<br> 00d0: 73 65 73 73 sess<br>ber_get_next: tag 0x30 len 217 contents:<br>ber_dump: buf=0x16a6f00 ptr=0x16a6f00 end=0x16a6fd9 len=217<br> 0000: 02 01 02 61 81 d3 0a 01 0e 04 00 04 1c 53 41 53 ...a.........SAS<br> 0010: 4c 28 30 29 3a 20 73 75 63 63 65 73 73 66 75 6c L(0): successful<br> 0020: 20 72 65 73 75 6c 74 3a 20 87 81 ad 6e 6f 6e 63 result: ...nonc<br> 0030: 65 3d 22 4f 53 38 6d 31 32 77 6a 41 62 6d 2b 62 e="OS8m12wjAbm+b<br> 0040: 4e 50 67 6a 37 2b 48 53 6e 65 36 58 69 41 6f 6f NPgj7+HSne6XiAoo<br> 0050: 6a 37 6a 31 6f 41 38 54 49 34 78 58 71 6f 3d 22 j7j1oA8TI4xXqo="<br> 0060: 2c 72 65 61 6c 6d 3d 22 6c 6f 63 61 6c 68 6f 73 ,realm="localhos<br> 0070: 74 22 2c 71 6f 70 3d 22 61 75 74 68 2c 61 75 74 t",qop="auth,aut<br> 0080: 68 2d 69 6e 74 2c 61 75 74 68 2d 63 6f 6e 66 22 h-int,auth-conf"<br> 0090: 2c 63 69 70 68 65 72 3d 22 72 63 34 2d 34 30 2c ,cipher="rc4-40,<br> 00a0: 72 63 34 2d 35 36 2c 72 63 34 22 2c 6d 61 78 62 rc4-56,rc4",maxb<br> 00b0: 75 66 3d 36 35 35 33 36 2c 63 68 61 72 73 65 74 uf=65536,charset<br> 00c0: 3d 75 74 66 2d 38 2c 61 6c 67 6f 72 69 74 68 6d =utf-8,algorithm<br> 00d0: 3d 6d 64 35 2d 73 65 73 73 =md5-sess<br>read1msg: ld 0x16993b0 msgid 2 message type bind<br>ber_scanf fmt ({eAA) ber:<br>ber_dump: buf=0x16a6f00 ptr=0x16a6f03 end=0x16a6fd9 len=214<br> 0000: 61 81 d3 0a 01 0e 04 00 04 1c 53 41 53 4c 28 30 a.........SASL(0<br> 0010: 29 3a 20 73 75 63 63 65 73 73 66 75 6c 20 72 65 ): successful re<br> 0020: 73 75 6c 74 3a 20 87 81 ad 6e 6f 6e 63 65 3d 22 sult: ...nonce="<br> 0030: 4f 53 38 6d 31 32 77 6a 41 62 6d 2b 62 4e 50 67 OS8m12wjAbm+bNPg<br> 0040: 6a 37 2b 48 53 6e 65 36 58 69 41 6f 6f 6a 37 6a j7+HSne6XiAooj7j<br> 0050: 31 6f 41 38 54 49 34 78 58 71 6f 3d 22 2c 72 65 1oA8TI4xXqo=",re<br> 0060: 61 6c 6d 3d 22 6c 6f 63 61 6c 68 6f 73 74 22 2c alm="localhost",<br> 0070: 71 6f 70 3d 22 61 75 74 68 2c 61 75 74 68 2d 69 qop="auth,auth-i<br> 0080: 6e 74 2c 61 75 74 68 2d 63 6f 6e 66 22 2c 63 69 nt,auth-conf",ci<br> 0090: 70 68 65 72 3d 22 72 63 34 2d 34 30 2c 72 63 34 pher="rc4-40,rc4<br> 00a0: 2d 35 36 2c 72 63 34 22 2c 6d 61 78 62 75 66 3d -56,rc4",maxbuf=<br> 00b0: 36 35 35 33 36 2c 63 68 61 72 73 65 74 3d 75 74 65536,charset=ut<br> 00c0: 66 2d 38 2c 61 6c 67 6f 72 69 74 68 6d 3d 6d 64 f-8,algorithm=md<br> 00d0: 35 2d 73 65 73 73 5-sess<br>read1msg: ld 0x16993b0 0 new referrals<br>read1msg: mark request completed, ld 0x16993b0 msgid 2<br>request done: ld 0x16993b0 msgid 2<br>res_errno: 14, res_error: <SASL(0): successful result: >, res_matched: <><br>ldap_free_request (origid 2, msgid 2)<br>ldap_int_sasl_bind: <null><br>ldap_parse_sasl_bind_result<br>ber_scanf fmt ({eAA) ber:<br>ber_dump: buf=0x16a6f00 ptr=0x16a6f03 end=0x16a6fd9 len=214<br> 0000: 61 81 d3 0a 01 0e 04 00 04 1c 53 41 53 4c 28 30 a.........SASL(0<br> 0010: 29 3a 20 73 75 63 63 65 73 73 66 75 6c 20 72 65 ): successful re<br> 0020: 73 75 6c 74 3a 20 87 81 ad 6e 6f 6e 63 65 3d 22 sult: ...nonce="<br> 0030: 4f 53 38 6d 31 32 77 6a 41 62 6d 2b 62 4e 50 67 OS8m12wjAbm+bNPg<br> 0040: 6a 37 2b 48 53 6e 65 36 58 69 41 6f 6f 6a 37 6a j7+HSne6XiAooj7j<br> 0050: 31 6f 41 38 54 49 34 78 58 71 6f 3d 22 2c 72 65 1oA8TI4xXqo=",re<br> 0060: 61 6c 6d 3d 22 6c 6f 63 61 6c 68 6f 73 74 22 2c alm="localhost",<br> 0070: 71 6f 70 3d 22 61 75 74 68 2c 61 75 74 68 2d 69 qop="auth,auth-i<br> 0080: 6e 74 2c 61 75 74 68 2d 63 6f 6e 66 22 2c 63 69 nt,auth-conf",ci<br> 0090: 70 68 65 72 3d 22 72 63 34 2d 34 30 2c 72 63 34 pher="rc4-40,rc4<br> 00a0: 2d 35 36 2c 72 63 34 22 2c 6d 61 78 62 75 66 3d -56,rc4",maxbuf=<br> 00b0: 36 35 35 33 36 2c 63 68 61 72 73 65 74 3d 75 74 65536,charset=ut<br> 00c0: 66 2d 38 2c 61 6c 67 6f 72 69 74 68 6d 3d 6d 64 f-8,algorithm=md<br> 00d0: 35 2d 73 65 73 73 5-sess<br>ber_scanf fmt (O) ber:<br>ber_dump: buf=0x16a6f00 ptr=0x16a6f29 end=0x16a6fd9 len=176<br> 0000: 87 81 ad 6e 6f 6e 63 65 3d 22 4f 53 38 6d 31 32 ...nonce="OS8m12<br> 0010: 77 6a 41 62 6d 2b 62 4e 50 67 6a 37 2b 48 53 6e wjAbm+bNPgj7+HSn<br> 0020: 65 36 58 69 41 6f 6f 6a 37 6a 31 6f 41 38 54 49 e6XiAooj7j1oA8TI<br> 0030: 34 78 58 71 6f 3d 22 2c 72 65 61 6c 6d 3d 22 6c 4xXqo=",realm="l<br> 0040: 6f 63 61 6c 68 6f 73 74 22 2c 71 6f 70 3d 22 61 ocalhost",qop="a<br> 0050: 75 74 68 2c 61 75 74 68 2d 69 6e 74 2c 61 75 74 uth,auth-int,aut<br> 0060: 68 2d 63 6f 6e 66 22 2c 63 69 70 68 65 72 3d 22 h-conf",cipher="<br> 0070: 72 63 34 2d 34 30 2c 72 63 34 2d 35 36 2c 72 63 rc4-40,rc4-56,rc<br> 0080: 34 22 2c 6d 61 78 62 75 66 3d 36 35 35 33 36 2c 4",maxbuf=65536,<br> 0090: 63 68 61 72 73 65 74 3d 75 74 66 2d 38 2c 61 6c charset=utf-8,al<br> 00a0: 67 6f 72 69 74 68 6d 3d 6d 64 35 2d 73 65 73 73 gorithm=md5-sess<br>ldap_parse_result<br>ber_scanf fmt ({iAA) ber:<br>ber_dump: buf=0x16a6f00 ptr=0x16a6f03 end=0x16a6fd9 len=214<br> 0000: 61 81 d3 0a 01 0e 04 00 04 1c 53 41 53 4c 28 30 a.........SASL(0<br> 0010: 29 3a 20 73 75 63 63 65 73 73 66 75 6c 20 72 65 ): successful re<br> 0020: 73 75 6c 74 3a 20 87 81 ad 6e 6f 6e 63 65 3d 22 sult: ...nonce="<br> 0030: 4f 53 38 6d 31 32 77 6a 41 62 6d 2b 62 4e 50 67 OS8m12wjAbm+bNPg<br> 0040: 6a 37 2b 48 53 6e 65 36 58 69 41 6f 6f 6a 37 6a j7+HSne6XiAooj7j<br> 0050: 31 6f 41 38 54 49 34 78 58 71 6f 3d 22 2c 72 65 1oA8TI4xXqo=",re<br> 0060: 61 6c 6d 3d 22 6c 6f 63 61 6c 68 6f 73 74 22 2c alm="localhost",<br> 0070: 71 6f 70 3d 22 61 75 74 68 2c 61 75 74 68 2d 69 qop="auth,auth-i<br> 0080: 6e 74 2c 61 75 74 68 2d 63 6f 6e 66 22 2c 63 69 nt,auth-conf",ci<br> 0090: 70 68 65 72 3d 22 72 63 34 2d 34 30 2c 72 63 34 pher="rc4-40,rc4<br> 00a0: 2d 35 36 2c 72 63 34 22 2c 6d 61 78 62 75 66 3d -56,rc4",maxbuf=<br> 00b0: 36 35 35 33 36 2c 63 68 61 72 73 65 74 3d 75 74 65536,charset=ut<br> 00c0: 66 2d 38 2c 61 6c 67 6f 72 69 74 68 6d 3d 6d 64 f-8,algorithm=md<br> 00d0: 35 2d 73 65 73 73 5-sess<br>ber_scanf fmt (x) ber:<br>ber_dump: buf=0x16a6f00 ptr=0x16a6f29 end=0x16a6fd9 len=176<br> 0000: 87 81 ad 6e 6f 6e 63 65 3d 22 4f 53 38 6d 31 32 ...nonce="OS8m12<br> 0010: 77 6a 41 62 6d 2b 62 4e 50 67 6a 37 2b 48 53 6e wjAbm+bNPgj7+HSn<br> 0020: 65 36 58 69 41 6f 6f 6a 37 6a 31 6f 41 38 54 49 e6XiAooj7j1oA8TI<br> 0030: 34 78 58 71 6f 3d 22 2c 72 65 61 6c 6d 3d 22 6c 4xXqo=",realm="l<br> 0040: 6f 63 61 6c 68 6f 73 74 22 2c 71 6f 70 3d 22 61 ocalhost",qop="a<br> 0050: 75 74 68 2c 61 75 74 68 2d 69 6e 74 2c 61 75 74 uth,auth-int,aut<br> 0060: 68 2d 63 6f 6e 66 22 2c 63 69 70 68 65 72 3d 22 h-conf",cipher="<br> 0070: 72 63 34 2d 34 30 2c 72 63 34 2d 35 36 2c 72 63 rc4-40,rc4-56,rc<br> 0080: 34 22 2c 6d 61 78 62 75 66 3d 36 35 35 33 36 2c 4",maxbuf=65536,<br> 0090: 63 68 61 72 73 65 74 3d 75 74 66 2d 38 2c 61 6c charset=utf-8,al<br> 00a0: 67 6f 72 69 74 68 6d 3d 6d 64 35 2d 73 65 73 73 gorithm=md5-sess<br>ber_scanf fmt (}) ber:<br>ber_dump: buf=0x16a6f00 ptr=0x16a6fd9 end=0x16a6fd9 len=0</p><p>sasl_client_step: 2<br>Please enter your password:<br>sasl_client_step: 1<br>ldap_sasl_bind<br>ldap_send_initial_request<br>ldap_send_server_request<br>ber_scanf fmt ({it) ber:<br>ber_dump: buf=0x16a6ff0 ptr=0x16a6ff0 end=0x16a7127 len=311<br> 0000: 30 82 01 33 02 01 03 60 82 01 2c 02 01 03 04 00 0..3...`..,.....<br> 0010: a3 82 01 23 04 0a 44 49 47 45 53 54 2d 4d 44 35 ...#..DIGEST-MD5<br> 0020: 04 82 01 13 75 73 65 72 6e 61 6d 65 3d 22 6d 61 ....username="ma<br> 0030: 74 74 40 65 78 61 6d 70 6c 65 2e 63 6f 6d 22 2c tt@example.com",<br> 0040: 72 65 61 6c 6d 3d 22 6c 6f 63 61 6c 68 6f 73 74 realm="localhost<br> 0050: 22 2c 6e 6f 6e 63 65 3d 22 4f 53 38 6d 31 32 77 ",nonce="OS8m12w<br> 0060: 6a 41 62 6d 2b 62 4e 50 67 6a 37 2b 48 53 6e 65 jAbm+bNPgj7+HSne<br> 0070: 36 58 69 41 6f 6f 6a 37 6a 31 6f 41 38 54 49 34 6XiAooj7j1oA8TI4<br> 0080: 78 58 71 6f 3d 22 2c 63 6e 6f 6e 63 65 3d 22 56 xXqo=",cnonce="V<br> 0090: 53 69 37 74 49 66 2b 48 78 59 5a 35 2b 4e 48 44 Si7tIf+HxYZ5+NHD<br> 00a0: 56 72 6c 6b 51 43 67 34 57 58 66 51 71 51 4c 33 VrlkQCg4WXfQqQL3<br> 00b0: 52 53 36 6d 4c 64 7a 52 4f 34 3d 22 2c 6e 63 3d RS6mLdzRO4=",nc=<br> 00c0: 30 30 30 30 30 30 30 31 2c 71 6f 70 3d 61 75 74 00000001,qop=aut<br> 00d0: 68 2d 63 6f 6e 66 2c 63 69 70 68 65 72 3d 72 63 h-conf,cipher=rc<br> 00e0: 34 2c 6d 61 78 62 75 66 3d 31 36 37 37 37 32 31 4,maxbuf=1677721<br> 00f0: 35 2c 64 69 67 65 73 74 2d 75 72 69 3d 22 6c 64 5,digest-uri="ld<br> 0100: 61 70 2f 6c 6f 63 61 6c 68 6f 73 74 22 2c 72 65 ap/localhost",re<br> 0110: 73 70 6f 6e 73 65 3d 34 34 31 63 33 36 62 65 39 sponse=441c36be9<br> 0120: 63 63 31 34 37 64 39 37 30 65 35 37 34 31 37 35 cc147d970e574175<br> 0130: 65 34 30 36 38 62 33 e4068b3<br>ber_scanf fmt ({i) ber:<br>ber_dump: buf=0x16a6ff0 ptr=0x16a6ff7 end=0x16a7127 len=304<br> 0000: 60 82 01 2c 02 01 03 04 00 a3 82 01 23 04 0a 44 `..,........#..D<br> 0010: 49 47 45 53 54 2d 4d 44 35 04 82 01 13 75 73 65 IGEST-MD5....use<br> 0020: 72 6e 61 6d 65 3d 22 6d 61 74 74 40 65 78 61 6d rname="matt@exam<br> 0030: 70 6c 65 2e 63 6f 6d 22 2c 72 65 61 6c 6d 3d 22 ple.com",realm="<br> 0040: 6c 6f 63 61 6c 68 6f 73 74 22 2c 6e 6f 6e 63 65 localhost",nonce<br> 0050: 3d 22 4f 53 38 6d 31 32 77 6a 41 62 6d 2b 62 4e ="OS8m12wjAbm+bN<br> 0060: 50 67 6a 37 2b 48 53 6e 65 36 58 69 41 6f 6f 6a Pgj7+HSne6XiAooj<br> 0070: 37 6a 31 6f 41 38 54 49 34 78 58 71 6f 3d 22 2c 7j1oA8TI4xXqo=",<br> 0080: 63 6e 6f 6e 63 65 3d 22 56 53 69 37 74 49 66 2b cnonce="VSi7tIf+<br> 0090: 48 78 59 5a 35 2b 4e 48 44 56 72 6c 6b 51 43 67 HxYZ5+NHDVrlkQCg<br> 00a0: 34 57 58 66 51 71 51 4c 33 52 53 36 6d 4c 64 7a 4WXfQqQL3RS6mLdz<br> 00b0: 52 4f 34 3d 22 2c 6e 63 3d 30 30 30 30 30 30 30 RO4=",nc=0000000<br> 00c0: 31 2c 71 6f 70 3d 61 75 74 68 2d 63 6f 6e 66 2c 1,qop=auth-conf,<br> 00d0: 63 69 70 68 65 72 3d 72 63 34 2c 6d 61 78 62 75 cipher=rc4,maxbu<br> 00e0: 66 3d 31 36 37 37 37 32 31 35 2c 64 69 67 65 73 f=16777215,diges<br> 00f0: 74 2d 75 72 69 3d 22 6c 64 61 70 2f 6c 6f 63 61 t-uri="ldap/loca<br> 0100: 6c 68 6f 73 74 22 2c 72 65 73 70 6f 6e 73 65 3d lhost",response=<br> 0110: 34 34 31 63 33 36 62 65 39 63 63 31 34 37 64 39 441c36be9cc147d9<br> 0120: 37 30 65 35 37 34 31 37 35 65 34 30 36 38 62 33 70e574175e4068b3<br>ber_flush2: 311 bytes to sd 3<br> 0000: 30 82 01 33 02 01 03 60 82 01 2c 02 01 03 04 00 0..3...`..,.....<br> 0010: a3 82 01 23 04 0a 44 49 47 45 53 54 2d 4d 44 35 ...#..DIGEST-MD5<br> 0020: 04 82 01 13 75 73 65 72 6e 61 6d 65 3d 22 6d 61 ....username="ma<br> 0030: 74 74 40 65 78 61 6d 70 6c 65 2e 63 6f 6d 22 2c tt@example.com",<br> 0040: 72 65 61 6c 6d 3d 22 6c 6f 63 61 6c 68 6f 73 74 realm="localhost<br> 0050: 22 2c 6e 6f 6e 63 65 3d 22 4f 53 38 6d 31 32 77 ",nonce="OS8m12w<br> 0060: 6a 41 62 6d 2b 62 4e 50 67 6a 37 2b 48 53 6e 65 jAbm+bNPgj7+HSne<br> 0070: 36 58 69 41 6f 6f 6a 37 6a 31 6f 41 38 54 49 34 6XiAooj7j1oA8TI4<br> 0080: 78 58 71 6f 3d 22 2c 63 6e 6f 6e 63 65 3d 22 56 xXqo=",cnonce="V<br> 0090: 53 69 37 74 49 66 2b 48 78 59 5a 35 2b 4e 48 44 Si7tIf+HxYZ5+NHD<br> 00a0: 56 72 6c 6b 51 43 67 34 57 58 66 51 71 51 4c 33 VrlkQCg4WXfQqQL3<br> 00b0: 52 53 36 6d 4c 64 7a 52 4f 34 3d 22 2c 6e 63 3d RS6mLdzRO4=",nc=<br> 00c0: 30 30 30 30 30 30 30 31 2c 71 6f 70 3d 61 75 74 00000001,qop=aut<br> 00d0: 68 2d 63 6f 6e 66 2c 63 69 70 68 65 72 3d 72 63 h-conf,cipher=rc<br> 00e0: 34 2c 6d 61 78 62 75 66 3d 31 36 37 37 37 32 31 4,maxbuf=1677721<br> 00f0: 35 2c 64 69 67 65 73 74 2d 75 72 69 3d 22 6c 64 5,digest-uri="ld<br> 0100: 61 70 2f 6c 6f 63 61 6c 68 6f 73 74 22 2c 72 65 ap/localhost",re<br> 0110: 73 70 6f 6e 73 65 3d 34 34 31 63 33 36 62 65 39 sponse=441c36be9<br> 0120: 63 63 31 34 37 64 39 37 30 65 35 37 34 31 37 35 cc147d970e574175<br> 0130: 65 34 30 36 38 62 33 e4068b3<br>ldap_write: want=311, written=311<br> 0000: 30 82 01 33 02 01 03 60 82 01 2c 02 01 03 04 00 0..3...`..,.....<br> 0010: a3 82 01 23 04 0a 44 49 47 45 53 54 2d 4d 44 35 ...#..DIGEST-MD5<br> 0020: 04 82 01 13 75 73 65 72 6e 61 6d 65 3d 22 6d 61 ....username="ma<br> 0030: 74 74 40 65 78 61 6d 70 6c 65 2e 63 6f 6d 22 2c tt@example.com",<br> 0040: 72 65 61 6c 6d 3d 22 6c 6f 63 61 6c 68 6f 73 74 realm="localhost<br> 0050: 22 2c 6e 6f 6e 63 65 3d 22 4f 53 38 6d 31 32 77 ",nonce="OS8m12w<br> 0060: 6a 41 62 6d 2b 62 4e 50 67 6a 37 2b 48 53 6e 65 jAbm+bNPgj7+HSne<br> 0070: 36 58 69 41 6f 6f 6a 37 6a 31 6f 41 38 54 49 34 6XiAooj7j1oA8TI4<br> 0080: 78 58 71 6f 3d 22 2c 63 6e 6f 6e 63 65 3d 22 56 xXqo=",cnonce="V<br> 0090: 53 69 37 74 49 66 2b 48 78 59 5a 35 2b 4e 48 44 Si7tIf+HxYZ5+NHD<br> 00a0: 56 72 6c 6b 51 43 67 34 57 58 66 51 71 51 4c 33 VrlkQCg4WXfQqQL3<br> 00b0: 52 53 36 6d 4c 64 7a 52 4f 34 3d 22 2c 6e 63 3d RS6mLdzRO4=",nc=<br> 00c0: 30 30 30 30 30 30 30 31 2c 71 6f 70 3d 61 75 74 00000001,qop=aut<br> 00d0: 68 2d 63 6f 6e 66 2c 63 69 70 68 65 72 3d 72 63 h-conf,cipher=rc<br> 00e0: 34 2c 6d 61 78 62 75 66 3d 31 36 37 37 37 32 31 4,maxbuf=1677721<br> 00f0: 35 2c 64 69 67 65 73 74 2d 75 72 69 3d 22 6c 64 5,digest-uri="ld<br> 0100: 61 70 2f 6c 6f 63 61 6c 68 6f 73 74 22 2c 72 65 ap/localhost",re<br> 0110: 73 70 6f 6e 73 65 3d 34 34 31 63 33 36 62 65 39 sponse=441c36be9<br> 0120: 63 63 31 34 37 64 39 37 30 65 35 37 34 31 37 35 cc147d970e574175<br> 0130: 65 34 30 36 38 62 33 e4068b3<br>ldap_msgfree<br>ldap_result ld 0x16993b0 msgid 3<br>wait4msg ld 0x16993b0 msgid 3 (infinite timeout)<br>wait4msg continue ld 0x16993b0 msgid 3 all 1<br>** ld 0x16993b0 Connections:<br>* host: localhost port: 389 (default)<br> refcnt: 2 status: Connected<br> last used: Sat Nov 5 14:10:16 2016</p><p><br>** ld 0x16993b0 Outstanding Requests:<br> * msgid 3, origid 3, status InProgress<br> outstanding referrals 0, parent count 0<br> ld 0x16993b0 request count 1 (abandoned 0)<br>** ld 0x16993b0 Response Queue:<br> Empty<br> ld 0x16993b0 response count 0<br>ldap_chkResponseList ld 0x16993b0 msgid 3 all 1<br>ldap_chkResponseList returns ld 0x16993b0 NULL<br>ldap_int_select<br>read1msg: ld 0x16993b0 msgid 3 all 1<br>ber_get_next<br>ldap_read: want=8, got=8<br> 0000: 30 4f 02 01 03 61 4a 0a 0O...aJ.<br>ldap_read: want=73, got=73<br> 0000: 01 50 04 00 04 43 53 41 53 4c 28 2d 31 29 3a 20 .P...CSASL(-1):<br> 0010: 67 65 6e 65 72 69 63 20 66 61 69 6c 75 72 65 3a generic failure:<br> 0020: 20 75 6e 61 62 6c 65 20 74 6f 20 63 61 6e 6f 6e unable to canon<br> 0030: 69 66 79 20 75 73 65 72 20 61 6e 64 20 67 65 74 ify user and get<br> 0040: 20 61 75 78 70 72 6f 70 73 auxprops<br>ber_get_next: tag 0x30 len 79 contents:<br>ber_dump: buf=0x16a5e70 ptr=0x16a5e70 end=0x16a5ebf len=79<br> 0000: 02 01 03 61 4a 0a 01 50 04 00 04 43 53 41 53 4c ...aJ..P...CSASL<br> 0010: 28 2d 31 29 3a 20 67 65 6e 65 72 69 63 20 66 61 (-1): generic fa<br> 0020: 69 6c 75 72 65 3a 20 75 6e 61 62 6c 65 20 74 6f ilure: unable to<br> 0030: 20 63 61 6e 6f 6e 69 66 79 20 75 73 65 72 20 61 canonify user a<br> 0040: 6e 64 20 67 65 74 20 61 75 78 70 72 6f 70 73 nd get auxprops<br>read1msg: ld 0x16993b0 msgid 3 message type bind<br>ber_scanf fmt ({eAA) ber:<br>ber_dump: buf=0x16a5e70 ptr=0x16a5e73 end=0x16a5ebf len=76<br> 0000: 61 4a 0a 01 50 04 00 04 43 53 41 53 4c 28 2d 31 aJ..P...CSASL(-1<br> 0010: 29 3a 20 67 65 6e 65 72 69 63 20 66 61 69 6c 75 ): generic failu<br> 0020: 72 65 3a 20 75 6e 61 62 6c 65 20 74 6f 20 63 61 re: unable to ca<br> 0030: 6e 6f 6e 69 66 79 20 75 73 65 72 20 61 6e 64 20 nonify user and<br> 0040: 67 65 74 20 61 75 78 70 72 6f 70 73 get auxprops<br>read1msg: ld 0x16993b0 0 new referrals<br>read1msg: mark request completed, ld 0x16993b0 msgid 3<br>request done: ld 0x16993b0 msgid 3<br>res_errno: 80, res_error: <SASL(-1): generic failure: unable to canonify user and get auxprops>, res_matched: <><br>ldap_free_request (origid 3, msgid 3)<br>ldap_int_sasl_bind: <null><br>ldap_parse_sasl_bind_result<br>ber_scanf fmt ({eAA) ber:<br>ber_dump: buf=0x16a5e70 ptr=0x16a5e73 end=0x16a5ebf len=76<br> 0000: 61 4a 0a 01 50 04 00 04 43 53 41 53 4c 28 2d 31 aJ..P...CSASL(-1<br> 0010: 29 3a 20 67 65 6e 65 72 69 63 20 66 61 69 6c 75 ): generic failu<br> 0020: 72 65 3a 20 75 6e 61 62 6c 65 20 74 6f 20 63 61 re: unable to ca<br> 0030: 6e 6f 6e 69 66 79 20 75 73 65 72 20 61 6e 64 20 nonify user and<br> 0040: 67 65 74 20 61 75 78 70 72 6f 70 73 get auxprops<br>ldap_parse_result<br>ber_scanf fmt ({iAA) ber:<br>ber_dump: buf=0x16a5e70 ptr=0x16a5e73 end=0x16a5ebf len=76<br> 0000: 61 4a 0a 01 50 04 00 04 43 53 41 53 4c 28 2d 31 aJ..P...CSASL(-1<br> 0010: 29 3a 20 67 65 6e 65 72 69 63 20 66 61 69 6c 75 ): generic failu<br> 0020: 72 65 3a 20 75 6e 61 62 6c 65 20 74 6f 20 63 61 re: unable to ca<br> 0030: 6e 6f 6e 69 66 79 20 75 73 65 72 20 61 6e 64 20 nonify user and<br> 0040: 67 65 74 20 61 75 78 70 72 6f 70 73 get auxprops<br>ber_scanf fmt (}) ber:<br>ber_dump: buf=0x16a5e70 ptr=0x16a5ebf end=0x16a5ebf len=0</p><p>ldap_msgfree<br>ldap_err2string<br>ldap_sasl_interactive_bind_s: Other (e.g., implementation specific) error (80)<br> additional info: SASL(-1): generic failure: unable to canonify user and get auxprops<br>ldap_free_connection 1 1<br>ldap_send_unbind<br>ber_flush2: 7 bytes to sd 3<br> 0000: 30 05 02 01 04 42 00 0....B.<br>ldap_write: want=7, written=7<br> 0000: 30 05 02 01 04 42 00 0....B.<br>ldap_free_connection: actually freed<br>---------------------------------------------------------------------------------------------------------------------------------<br>---------------------------------------------------------------------------------------------------------------------------------<br>---------------------------------------------------------------------------------------------------------------------------------</p><p>#1</p><p>[root@localhost openldap]# sasldblistusers2<br>matt@example.com: userPassword<br>---------------------------------------------------------------------------------------------------------------------------------<br>---------------------------------------------------------------------------------------------------------------------------------<br>---------------------------------------------------------------------------------------------------------------------------------</p><p>#2<br>[root@localhost openldap]# pluginviewer -a<br>Installed and properly configured auxprop mechanisms are:<br><none></p><p>---------------------------------------------------------------------------------------------------------------------------------<br>---------------------------------------------------------------------------------------------------------------------------------<br>---------------------------------------------------------------------------------------------------------------------------------<br>#3</p><p>[root@localhost openldap]# chown -R openldap:openldap /var/lib/ldap<br>[root@localhost openldap]# chmod -R 644 /var/lib/ldap<br>[root@localhost openldap]# ls -la /var/lib/ldap<br>total 19140<br>drwSr-Sr--. 2 openldap openldap 4096 Nov 5 14:24 .<br>drwxr-xr-x. 37 root root 4096 Nov 5 13:31 ..<br>-rw-r--r--. 1 openldap openldap 2048 Nov 5 14:24 alock<br>-rw-r--r--. 1 openldap openldap 2326528 Nov 5 14:25 __db.001<br>-rw-r--r--. 1 openldap openldap 17448960 Nov 5 14:25 __db.002<br>-rw-r--r--. 1 openldap openldap 1884160 Nov 5 14:25 __db.003<br>-rw-r--r--. 1 openldap openldap 845 Nov 5 13:31 DB_CONFIG<br>-rw-r--r--. 1 openldap openldap 8192 Nov 5 13:39 dn2id.bdb<br>-rw-r--r--. 1 openldap openldap 32768 Nov 5 13:39 id2entry.bdb<br>-rw-r--r--. 1 openldap openldap 10485760 Nov 5 14:24 log.0000000001<br>---------------------------------------------------------------------------------------------------------------------------------<br>---------------------------------------------------------------------------------------------------------------------------------<br>---------------------------------------------------------------------------------------------------------------------------------<br>#4</p><p>[root@localhost openldap]# db_dump -p /etc/sasldb2<br>VERSION=3<br>format=print<br>type=hash<br>db_pagesize=4096<br>HEADER=END<br> matt\00example.com\00userPassword<br> secret<br>DATA=END<br>---------------------------------------------------------------------------------------------------------------------------------<br>---------------------------------------------------------------------------------------------------------------------------------<br>---------------------------------------------------------------------------------------------------------------------------------</p><p>#5</p><p>vi /etc/sasl2/slapd.conf<br>mech_list: DIGEST-MD5<br>pwcheck_method:saslauthd<br>sasldb_path: /etc/sasldb2<br>auxprop_plugin: sasldb</p><br><br><br>-- <br>best regards<br>mark gavrilman</BODY></HTML>