Re: Simple BINDS over SSL/TLS

["Douglas E. Engert" <deengert@anl.gov>]

peter@devries.tv wrote:
> On Wed, May 02, 2007 at 11:19:39AM -0400, peter@devries.tv wrote:
>> I was wondering if it is possible for autofs to do simple binds over
>> TLS/SSL rather than having to do them over SASL.
> 
> This may not have been clear enough.  I want autofs to authenticate to
> the LDAP server as a user but without the use of SASL. 

Looking at autofs-4.1.4, it looks like it only does anonymous,
because it does not have a binddn or bindpw to use. It can use TLS,
if the ldap.conf it uses has someting like:

  URI ldaps://your.ldap.server.name
  TLS_CACERTDIR path to ca certs

The ldap library could fill in a binddn from a ldaprc, Its the  bindpw
that the ldap library will not fill in, and autofs does not have an
easy way to get it.

Speakinig of SASL, the best I can tell is 4.1.4 does not support it
directly, but could with a patch to call

  ldap_sasl_interactive_bind_s

I had a working patch, but got side tracked. Are there any plans
to add SASL support to autofs, such that it ends up in Debian distribution?



> Thanks,
> Peter
> 
> _______________________________________________
> autofs mailing list
> autofs@linux.kernel.org
> http://linux.kernel.org/mailman/listinfo/autofs
> 
> 

-- 

  Douglas E. Engert  <DEEngert@anl.gov>
  Argonne National Laboratory
  9700 South Cass Avenue
  Argonne, Illinois  60439
  (630) 252-5444