To test this you want to use cyrus_sasl_sample_client and
cyrus_sasl_sample_server in your case they emulate the ldap client and
ldap server.

saslauthd is a backend daemon for the sasl libs which is used more like a
plugin which the sasl_libs call.

You really want something more along the lines of:
cyrus_sasl_sample_server -p 389 -s ldap -m GSSAPI
cyrus_sasl_sample_client -p 389 -s ldap -m GSSAPI localhost



On Thu, 4 Sep 2008, Ric wrote:

> I'm working on getting SASL setup for use in OpenLADP+Kerberos.
>
> I've got Cyrus SASL installed from repos on OpenSuse,
>
>       saslauthd -v
>               saslauthd 2.1.22
>               authentication mechanisms: getpwent kerberos5 pam rimap shadow
> ldap
>
> I'm reading the "Configuring GSSAPI and Cyrus SASL" doc
> (.../gssapi.html).
>
> The tutorial states:
>
>       "The command-line used for sample-server needs to specify the
> GSSAPI service name and the location of the plug-ins; your sample
> command line might look something like this:
>
>       ./sample-server -s host -p ../plugins/.libs
>
>       on UNIX"
>
> Checking the server options,
>
>       /usr/bin/cyrus_sasl_sample_server --help
>               /usr/bin/cyrus_sasl_sample_server: invalid option -- '-'
>               usage: server [-p port] [-s service] [-m mech]
>
> "-p" refers to "port".  Which is clearly *not* the plugin library
> ...
>
> (1) which is the *correct* usage of/for "-p"?
>
>
> When I try to run the recommended test, I get simply,
>
>       /usr/bin/cyrus_sasl_sample_server -s ldap
>               trying 2, 1, 6
>               trying 10, 1, 6
>               socket: Address family not supported by protocol
>
> not, as the doc says,
>
>       " You should get a response similar to:
>
>         Generating client mechanism list...
>         Sending list of 3 mechanism(s)
>         S: R1NTQVBJIFBMQUlOIEFOT05ZTU9VUw==
>       "
>
> (2) Can someone please clarify how to set up, run & pass the simple
> 'sample' tests?  Or, point to some other docs?
>
> Thanks,
>
> Ric
>
> --
> Click here to choose from a huge selection of quality heart rate monitors!
> http://tagline.hushmail.com/fc/Ioyw6h4ewpWf1jajzKvLOVCLUlweMn1XGi1uS54GBE4QvdElxfnhTM/
>
>

--------------------------------------
  Sean O'Malley, Information Technologist
  Michigan State University
-------------------------------------

Reply via email to