Re: SASL pass-through fails

2016-09-18 Thread Joshua Schaeffer
I figured out the problem. My krb5.keytab file somehow got corrupted on my OpenLDAP server. I just needed to deleted it and recreate it. I got tipped off to the problem when I started having login issues to the server as well. On 09/18/2016 04:30 AM, Michael Ströder wrote: FWIW: There's a co

Re: SASL pass-through fails

2016-09-18 Thread Michael Ströder
Joshua Schaeffer wrote: > I've been using OpenLDAP and Kerberos for central authentication for a while > now, but I have a couple programs that can't use GSSAPI directly and I want to > setup SASL pass-through authentication to allow those services to use my > Kerberos passwords, but I'm having tro

Re: SASL pass-through fails

2016-09-17 Thread Joshua Schaeffer
On 09/17/2016 02:41 PM, Joshua Schaeffer wrote: Your testsaslauthd is trying to use the imap service. If you don't have an imap service in your KDC, then of course it will fail. I saw that, but couldn't figure out how to change the service directly (Nothing in saslauthd(8) says anything

Re: SASL pass-through fails

2016-09-17 Thread Joshua Schaeffer
Your testsaslauthd is trying to use the imap service. If you don't have an imap service in your KDC, then of course it will fail. I saw that, but couldn't figure out how to change the service directly (Nothing in saslauthd(8) says anything about service). I'm assuming that "imap" is the de

Re: SASL pass-through fails

2016-09-17 Thread Howard Chu
Joshua Schaeffer wrote: Hey all, I've been using OpenLDAP and Kerberos for central authentication for a while now, but I have a couple programs that can't use GSSAPI directly and I want to setup SASL pass-through authentication to allow those services to use my Kerberos passwords, but I'm having

Re: SASL pass-through fails

2016-09-17 Thread Brendan Kearney
On 09/17/2016 03:38 PM, Joshua Schaeffer wrote: Hey all, I've been using OpenLDAP and Kerberos for central authentication for a while now, but I have a couple programs that can't use GSSAPI directly and I want to setup SASL pass-through authentication to allow those services to use my Kerber