sasl

saslpasswd2: generic failure on Windows

I get a generic failure when I try to run: saslpasswd2 username This was installed by Collanet's Subversion 1.5.2. ...

SMTP with CRAM-MD5 in Java

I need to send email through an (external) SMTP server from Java however this server will only accept CRAM-MD5 authentication, which is not supported by JavaMail. What would be a good way to get these emails to send? (It must be in Java.) ...

Using EXTERNAL mechanism with Cyrus SASL

Does the Cyrus SASL api not support the EXTERNAL mechanism? I'm trying to use it as a client, but it returns SASL_NOMECH when asked. % cat cyrus_sal_ex.c /* cyrus_sasl_ex.c: Example of using the Cyrus SASL api */ #include <stdio.h> /* for printf() */ #include <sasl/sasl.h> /* for sasl_client_*(), SASL_*, sasl_*_t */ static char...

Java LDAP with SASL

Hi, I am using Java 1.2 with the Netscape ldapjdk.jar and trying to make an LDAP connection to one of our servers that needs SASL. I’m also relativity new to LDAP. I do know that java EE has built in LDAP but I am not able to use it at this time. I have been able to make a connection to another server using regular LDAP but I am not ...

Subversion: Copy repository users from existing to new project (SASL Database)

Is it possible to copy the sasl (which contains username + pw) database from one repository to another? The reason Im asking that is the following: Everytime you create a new project in SVN it opens up a repository for it. So be it. Unfortunately it does not copy the existing users of another (selectable) already existing project into ...

XMPP SASL authentication on Ejabberd with PHP

I'm trying to authenticate with an XMPP server using SASL. /** * Send Authentication, SASL * @return Bool * @param $username String * @param $password String */ function authenticate($username, $password) { $this->username = $username; $this->password = $password; var_dump($username, $passwo...

Erlang: What are strategies for dealing with huge SASL crash dumps?

When my app crashes, I get a crash report that takes 5 minutes to scroll by. What's the best way to handle this? ...

SVN + SASL + ActiveDirectory: How to

I'm trying to set up SVN to authenticate against an ActiveDirectory. I know this is possible if you set up SVN to be served using Apache, but doing so introduces too much overhead, and SVN runs too slow. From reading the SVN docs, it sounds like it should now be possible (since SASL was integrated into SVN in 1.5) to configure SVN to a...

What programs use GSS-API? Any decent sample programs?

I thought I wanted to use GSS-API, but now am not so sure, since I'm having a hard time finding good sample code for a trivial client/server pair. Sun has documentation including sample code, but it's written specifically for their GSS API implementation, using a few proprietary functions not in e.g. the GNU GSS-API (and for which it's ...

how to use ldap_sasl_bind_s() with SSL, DN, password (no client cert)

I have ldap_sasl_bind_s() working fine with SSL and client cert (without DN and password) from 'C' windows program. When I call ldap_sasl_bind_s() using SSL, DN and password (no client cert) it throws null pointer exception. Should this work or should I be using another api call? ...

How to use the Java SASL API and CRAM-MD5

Hi! I'm currently playing with the Java SASL API and I wrote a little program to simulate a challenge response sequence using CRAM-MD5. However, I'm unsure about how to do this, as SaslClient and SaslServer only have methods evaluateChallenge(...) and evaluateResponse(...). I would expect SaslServer to have a method like issueChallenge(...

Java, LDAP with MySQL, and authenticating users

There's a few moving pieces to this one, so I'll go through things fairly slowly. I have a java web app that has registered a few thousand users, and stored them in a MySQL DB. The passwords for each user has been hashed using SHA1, plus a bit of extra trickery including a randomly generated salt. I also have an LDAP server setup (Open...

In SASL authentication, are the messages between a particular client and server the same every time it connects?

I wrote a test client and server using the Cyrus SASL library, and I'm manually forcing it to select GSSAPI as the mechanism. While debugging, I printed the md5sum of each message as it was passed between the two. I noticed that the sequence seems to be the same every time I connect. That is, if the message sequence on the first negot...

php_ldap over ssl difficulties

I am trying to bind to AD with php_ldap (using ADLdap), from a Ubuntu (hardy 8.04LTS) host. Binding on port 389 is fine to ldap://myserver, but does not allow me to do things like set password, so I need to bind on port 636 to ldaps://myserver. I am aware that some form of credential passing occurs, perhaps with certificates, but I am r...

Running the report browser (rb) for SASL error reports whilst in a remote shell

Folks we are now delploying a lot of Erlang instances and we are seeing bugs been thrown and would like to examine them... Normally we connect to the running instance with a remote shell and get access to an Erlang console that way, but this doesn't work for rb or error messages... How do I get remote access to my SASL error messages w...

Any examples of using Ruby net/ldap with sasl?

I am trying to bind to an Active Directoy server using Ruby Net::LDAP, like so: Net::LDAP.new(:host => "...", :port => "...", :encryption => :simple_tls, :auth => {:method => :sasl, ... But I'm not sure how to specify they username and password. I can't seem to find any examples of using sasl. How do I specify my credent...

PHP SASL(PECL) sasl_server_init(app) works with CLI but not with ApacheModule

I have written a simple auth script so that Webusers can type in their username and password and my PHP script verifies them by SASL. The SASL Library is initialized by php function sasl_server_init("phpfoo"). So phpfoo.conf in /etc/sasl2/ is used. phpfoo.conf: pwcheck_method: saslauthd mech_list: PLAIN LOGIN log_level: 9 So ...

ldap_sasl_bind_s(GSSAPI) - What should be provided in the credentials BERVAL structure

Hi, I'm trying to use the ldap_sasl_bind_s method from the Microsoft LDAP C SDK, with GSSAPI as the authentication mechanism. ldap_sasl_bind_s expects the credentials as a BERVAL structure, which is opaque. Given a username (or a DN) and a password, how do I get to the BERVAL structure that I'm supposed to pass to ldap_sasl_bind_s? T...

SASL library for .net

I am searching for a sasl library for .net. So far I could only find: Sasl.Net but it looks dead and only implements plain and digest-md5. Can anyone suggest a good library? Preferably an open-source implementation. ...

Is there SASL implementation that works on Android?

Android has no SASL by default. Curious, if there some 3rd party implementation that can be used on Android? Did some one try http://www.cryptix.org/? ...