On Thu, 8 Jul 2004, Quanah Gibson-Mount wrote:

> --On Thursday, July 08, 2004 11:54 AM -0700 Larry Lile 
> <[EMAIL PROTECTED]> wrote:
> 
> Larry,
> 
> 1) Mark Adamson's implementation of Authen::Cyrus::SASL is horribly broken. 
> Why he ignore's Patrick's updated, which were submitted to him on multiple 
> occasions is beyond me, but that's how it is.  Don't use Mark's 
> implementation with Cyrus-SASL v2.

Unfortunately it's the one availble from CPAN and I would just
like to see it fixed.  Thank you for the pointer to Patrick's 
module, I am trying to get to a configuration where I can use
his code.

> 2) I neither write nor maintain any of these things.  I simply pointed you 
> to what worked for me.  If it doesn't work for you, it suggests to me there 
> are other issues with your system that need resolving.

I understand that you aren't responsible for any of these tools and I
do appreciate your help and suggestions.  I am still debugging the 
problem on my end with your comments as my guide.  If I find that the
problems are OS related I will work with RedHat to get the appropriate 
updates made if possible.

> 3) IIRC, the sockname error you are seeing happens when you mix cyrus-sasl 
> v1 and cyrus-sasl v2.

I will try going directly with the cyrus-sasl distribution instead of
the RedHat provided RPMS.

> 4) Nothing you've reported indicates there is an error with Net::LDAP to me.

I have never really suspected Net::LDAP had a problem.  Net::LDAP has
always been rock solid for me in every regard.  The problems I have
experienced have only been with SASL/GSSAPI auth used in conjuction
with Net::LDAP.

> 5) Again, the following works for me:

I am working towards that configuration, but WS3(-U2) and 5.6.x is a 
tough combo to achieve.

> 1) Perl 5.6.1 (I can poke at putting 5.8.x somewhere)
> 2) Net::LDAP 0.31 with SASL patch from 0.32
>   --- perl-ldap-0.31/lib/Net/LDAP.pm.orig 2004-01-01 02:38:27.000000000 
> -0800
>   +++ perl-ldap-0.31/lib/Net/LDAP.pm      2004-06-11 07:40:19.410972000 
> -0700
>   @@ -328,9 +328,6 @@
>          if $ldap->{net_ldap_version} < 3;
> 
>        my $sasl = $passwd;
>   -    # Tell the SASL object our user identifier
>   -    $sasl->callback( user => "dn: $stash{name}")
>   -      unless $sasl->callback('user');
> 
>        my $sasl_conn = $sasl->client_new("ldap",$ldap->{net_ldap_host});
> 
> 3) Authen::SASL 2.07

Understood.  I was making my query of Graham and Mark and thought it
was best for the purposes of discussion to be at the current revs for
debugging purposes.

> 4) Patrick's excellent implementation of Authen::Cyrus::SASL, which I 
> pointed you at before.  Attempting to use Mark's version is a pointless 
> exercise.

I am trying to get a configuration together using Patrick's code.  I
don't doubt that it works, I just need to puzzle together all the
right bits.

> If you have any more questions, please leave me out of it.

My apologies Quanah, I did not mean to give you any offense.  You
have been very helpful and I appreciate it.

My intent was to get Graham and Mark talking about the problem and
provide them with a testbed environment.  It would be nice if 
all of this "just worked" using the CPAN modules.

If I don't hear anything from Graham or Mark about pursuing a fix
I will simply return to lurking and trying to fix my configuration
using Patrick's module.

My sincerest apologies Quanah.

-- 
Larry


Reply via email to