2008年6月28日

LDAP simeple bind without SASL

OpenLDAP Faq-O-Matic: ldap_sasl_interactive_bind_s: No such Object
dap_sasl_interactive_bind_s: No such Object
This indicates that LDAP SASL authentication function could not read the Root DSE.
The error will occur when the server doesn't provide a root DSE. This may be due to access controls.

Note, also, that LDAPv2 servers, such as those OpenLDAP 1.x's slapd(8), do not provide a root DSE. Use -P 2 when LDAPv2 is desired. LDAPv2 servers also do not support SASL binds, so you will need to use a "simple" bind instead.
Note: SASL bind is the default for all OpenLDAP tools. To force use of "simple" bind, use the "-x" option. Use of "simple" bind is not recommended unless one has adequate confidentiality protection in place (e.g. TLS/SSL, IPSEC).

沒有留言: