LDAP SASL error

[ulot]

I used yum to grab the ldap servers package. Edited all the config files and imported from an ldiff. Everything seems to be there. If I do a ldapsearch -x, I get a list of everything in the directory. If I try to authenticate with -D "cn=root...dn=net", I get a SASL error like the following:

ldap_sasl_interactive_bind_s: Internal (implementation specific) error (80)
additional info: SASL(-13): user not found: no secret in database

I haven't done anything to setup SASL or for LDAP to use SASL that I know of. Is this a default for FC2? I can't figure out why it is doing this. I can post the slapd.conf and ldap.conf if needed.

[jimbo]

Have you had any luck with this one? I'm running into the same issue.

Very frustrating!

[ulot]

Uhmm I really don't remember what I did. Try removing the -x. I'll have to take another look at mine to refresh my memory. Sorry.

[bryancole]

Is getting a list of everything in your directory (using the -x switch) not what you want?

You don't need SASL for basic ldap operation with pam/nss or as an address book. Without the -x switch ldap defaults to SASL (which will fail if you've not set it up). So stick with simple -x authentication.

If ldapsearch is returning too much information, then maybe you need to look as your access-control directives, or use a search-filter.

[quichedood]

i got the same problem with my fc4.
doing a ldapsearch on a client with the -x argument returns me all the tree but when i remove it, nothing.

Authentification doesn't work anyway.

Does someone got a solution ?