Failing at 1st test-the-SASL-server steps

Sean O'Malley omalleys at msu.edu
Fri Sep 5 09:33:47 EDT 2008


To test this you want to use cyrus_sasl_sample_client and
cyrus_sasl_sample_server in your case they emulate the ldap client and
ldap server.

saslauthd is a backend daemon for the sasl libs which is used more like a
plugin which the sasl_libs call.

You really want something more along the lines of:
cyrus_sasl_sample_server -p 389 -s ldap -m GSSAPI
cyrus_sasl_sample_client -p 389 -s ldap -m GSSAPI localhost



On Thu, 4 Sep 2008, Ric wrote:

> I'm working on getting SASL setup for use in OpenLADP+Kerberos.
>
> I've got Cyrus SASL installed from repos on OpenSuse,
>
> 	saslauthd -v
> 		saslauthd 2.1.22
> 		authentication mechanisms: getpwent kerberos5 pam rimap shadow
> ldap
>
> I'm reading the "Configuring GSSAPI and Cyrus SASL" doc
> (.../gssapi.html).
>
> The tutorial states:
>
> 	"The command-line used for sample-server needs to specify the
> GSSAPI service name and the location of the plug-ins; your sample
> command line might look something like this:
>
> 	./sample-server -s host -p ../plugins/.libs
>
> 	on UNIX"
>
> Checking the server options,
>
> 	/usr/bin/cyrus_sasl_sample_server --help
> 		/usr/bin/cyrus_sasl_sample_server: invalid option -- '-'
> 		usage: server [-p port] [-s service] [-m mech]
>
> "-p" refers to "port".  Which is clearly *not* the plugin library
> ...
>
> (1) which is the *correct* usage of/for "-p"?
>
>
> When I try to run the recommended test, I get simply,
>
> 	/usr/bin/cyrus_sasl_sample_server -s ldap
> 		trying 2, 1, 6
> 		trying 10, 1, 6
> 		socket: Address family not supported by protocol
>
> not, as the doc says,
>
> 	" You should get a response similar to:
>
> 	  Generating client mechanism list...
> 	  Sending list of 3 mechanism(s)
> 	  S: R1NTQVBJIFBMQUlOIEFOT05ZTU9VUw==
> 	"
>
> (2) Can someone please clarify how to set up, run & pass the simple
> 'sample' tests?  Or, point to some other docs?
>
> Thanks,
>
> Ric
>
> --
> Click here to choose from a huge selection of quality heart rate monitors!
> http://tagline.hushmail.com/fc/Ioyw6h4ewpWf1jajzKvLOVCLUlweMn1XGi1uS54GBE4QvdElxfnhTM/
>
>

--------------------------------------
  Sean O'Malley, Information Technologist
  Michigan State University
-------------------------------------



More information about the Cyrus-sasl mailing list