question: can I use libsasl.dll to delegate authentication to ldap server without saslauthd/srvtab

Dan White dwhite at olp.net
Sun Jul 16 01:15:34 EDT 2017


On 07/16/17 08:40 +0800, comic fans wrote:
>Hello everyone
>        currently I'm setting up a svnserver on windows platform, I'd
>like to use sasl to delegate authentication to our ldap server( which
>supports gssapi/gssapi spnego/external,  but I don't have permission
>to config nor operate on it).  I've successfully test svnserve auth
>with sasldb,  but after reading sasl documents, I have:
>1 to use gssapi with  srvtab file which from ldap server,
>2 to use ldapdb plugin with ldap server configured,
>3 to use saslauthd (which didn't run on windows)
>
>I wonder if there is another way to do this ? any suggestion would be helpful .

DIGEST-MD5 may be an option. Retrieve supportedSASLMechanisms from the root
DSE to obtain a list of available mechanisms:

ldapsearch -H ldaps://<fqdn> -x -b "" -s base -LLL supportedSASLMechanisms


More information about the Cyrus-sasl mailing list