Re: cyrus-sasl/openldap question

2018-10-25 Thread Stuart Henderson
On 2018-10-24, Markus Rosjat  wrote:
> Hi there,
>
> it seems to get sasl working with ldap is a lifetime task. Sad thing I 
> had it working but only after  adding/deleting packages of the specific 
> versions of cyrus-sasl and I dont know which you really need to get it 
> working in a "clean" setup. So to all the people out there who are 
> running service like sendmail, courier with openldap and sasl could you 
> point to the proper package to use or do in need to really install one 
> package then replace it with another so that just the proper libs are 
> present somewere on the system (this seems kind bad)? And docs on 
> cyrus-sasl are a big fk^ in my opinion but thats another story.

I'm not using sendmail+courier here but as a "1-line" install command
it looks like you'd probably want something like

pkg_add courier-authlib-ldap courier-imap cyrus-sasl--ldap sendmail--ldap-sasl

(The package names above including "--" select one of various flavours;
if you leave it out you would usually get to choose from a list presented
instead. The names like "courier-authlib-ldap" are modular packages or
"multipackages" where the extra support is added by pluggable modules

For dovecot and postfix you'd want "pkg_add dovecot-ldap postfix--ldap";
dovecot has its own sasl implementation which is also supported by postfix,
config is easier than with cyrus-sasl.




Re: cyrus-sasl/openldap question

2018-10-24 Thread Allan Streib
Have you looked at OpenBSD's ldapd(8) instead of openldap?

It supports SASL PLAIN auth, according to the 6.3 man page.

I don't currently use SASL but otherwise have found the config of ldapd
to be much simpler than slapd.

Yes, last time I had set up OpenLDAP with SASL it was fragile and
required a lot of fiddling to get it working. That was on Linux, about
10 years ago.

Allan



cyrus-sasl/openldap question

2018-10-24 Thread Markus Rosjat

Hi there,

it seems to get sasl working with ldap is a lifetime task. Sad thing I 
had it working but only after  adding/deleting packages of the specific 
versions of cyrus-sasl and I dont know which you really need to get it 
working in a "clean" setup. So to all the people out there who are 
running service like sendmail, courier with openldap and sasl could you 
point to the proper package to use or do in need to really install one 
package then replace it with another so that just the proper libs are 
present somewere on the system (this seems kind bad)? And docs on 
cyrus-sasl are a big fk^ in my opinion but thats another story.


regards

--
Markus Rosjatfon: +49 351 8107224mail: ros...@ghweb.de

G+H Webservice GbR Gorzolla, Herrmann
Königsbrücker Str. 70, 01099 Dresden

http://www.ghweb.de
fon: +49 351 8107220   fax: +49 351 8107227

Bitte prüfen Sie, ob diese Mail wirklich ausgedruckt werden muss! Before you 
print it, think about your responsibility and commitment to the ENVIRONMENT