Mailing-List: contact users-help@directory.apache.org; run by ezmlm
Precedence: bulk
Reply-To: users@directory.apache.org
Received-SPF: pass (athena.apache.org: domain of iikonne@us.ibm.com designates
 32.97.110.149 as permitted sender)
In-Reply-To: 
 <CABzFU-eVMANz18dPszyFgNXdiqo-84SKFYtn5YNX71MgMYO0Pg@mail.gmail.com>
References: 
 <OFC1318A01.2AACBC42-ON86257D2C.00697033-86257D2C.0069E258@us.ibm.com>
	<53E28613.9090200@gmail.com>
	<OF427BBD96.4B2FD25B-ON86257D2C.006DC7B5-86257D2C.006E0649@us.ibm.com>
	<CADPkm8473Qcp2yH3XTb9228-eFe4_Y_aZZRt4dmDWUFzgAcitA@mail.gmail.com>
	<OF772239CA.776F9B30-ON86257D2C.00711C2F-86257D2C.00719B9F@us.ibm.com>
	<53E29DBD.1020104@gmail.com>
	<OFCF1417FD.D498B559-ON86257D2C.007B3DC5-86257D2C.007C94B6@us.ibm.com>
	<CABzFU-d26zBS5qq6XSsGvSiX10oNJk57UiuW2_oO8wPw71n5ow@mail.gmail.com>
	<OFEE80EF35.E2B8F135-ON86257D34.000372BA-86257D34.0003ADAB@us.ibm.com>
 <CABzFU-eVMANz18dPszyFgNXdiqo-84SKFYtn5YNX71MgMYO0Pg@mail.gmail.com>
To: users@directory.apache.org
MIME-Version: 1.0
Subject: Re: SASL DIGEST-MD5 Authentication
From: Ike Ikonne <iikonne@us.ibm.com>
Message-ID: 
 <OF8F1E93A7.7FA42C79-ON86257D35.00730FDA-86257D35.00735C53@us.ibm.com>
Date: Fri, 15 Aug 2014 16:00:05 -0500
Content-Type: multipart/alternative;
 boundary="=_alternative 00735C1D86257D35_="

--=_alternative 00735C1D86257D35_=
Content-Type: text/plain; charset="ISO-8859-1"
Content-Transfer-Encoding: quoted-printable

Hi Kiran,

Thanks, the example that you sent made a huge difference; I have now=20
managed to
get DIGEST-MD5 to work.  One of the problem is that I needed to restart=20
APACHE DS
for all the configurations to take effect, that is my observation.

Again, thank you for the wonderful example, it made a difference; now,=20
would CRAM-MD5
follow the same pattern?

Thanks,

Ike


From:   Kiran Ayyagari <kayyagari@apache.org>
To:     "users@directory.apache.org" <users@directory.apache.org>,=20
Date:   08/15/2014 02:11 PM
Subject:        Re: SASL DIGEST-MD5 Authentication


I have successfully tested DIGEST-MD5(SASL) using Studio

Here is my server configuration http://pastebin.com/b0tsyVGK
I have added the below entry in my /etc/hosts file
   127.0.0.1     example.com

 I have added a user entry with DN uid=3Dkirana,ou=3Dsystem

 The Studio connection network tab looks like this
http://i.imgur.com/qfg2Aii.png
 and the Authentication tab like this http://i.imgur.com/eUFu3Gq.png

HTH


On Thu, Aug 14, 2014 at 6:10 AM, Ike Ikonne <iikonne@us.ibm.com> wrote:

> Hi all,
>
> Anyone has any more suggestions on how I can get DIGEST-MD5 SASL
> to work for me?  I haven't had any luck yet and I have tried all the
> suggestions
> from the group and I do thank you all for that, I  still have a need to
> get that authentication mechanism to work in my environment.
>
> Thanks,
>
> Ike
>
>
>
>
> From:   Kiran Ayyagari <kayyagari@apache.org>
> To:     "users@directory.apache.org" <users@directory.apache.org>,
> Date:   08/07/2014 12:08 AM
> Subject:        Re: SASL DIGEST-MD5 Authentication
>
>
>
> On Thu, Aug 7, 2014 at 4:10 AM, Ike Ikonne <iikonne@us.ibm.com> wrote:
>
> > Hi,
> >
> > I use JNDI API  on JRE 1.7  to establish connection to APACHE DS.
> > I am able to establish SIMPLE authentication to APACHE DS, I am
> > just trying to get DIGEST-MD5 to work.  Here are my enironment:
> >
> >          Hashtable env =3D new Hashtable();
> >         env.put(Context.INITIAL=5FCONTEXT=5FFACTORY, ldapCtxFactory);
> >
> >         if (authMethod !=3D null)
> >             env.put(Context.SECURITY=5FAUTHENTICATION, authMethod);
> >         if (principal !=3D null)
> >             env.put(Context.SECURITY=5FPRINCIPAL, principal);
> >         if (credentials !=3D null)
> >             env.put(Context.SECURITY=5FCREDENTIALS, credentials);
> >         if (referral !=3D null)
> >             env.put(Context.REFERRAL, referral);
> >         if (ldapVer !=3D null)
> >             env.put("java.naming.ldap.version", ldapVer);
> >        env.put("java.naming.security.sasl.realm", "example.com");
> >
> > Tell me, do I need to configure the example.com realm or is it
> > configured as a default by APACHE DS?
> >
> your must be able to resolve your realm name (here example.com), either
> add an entry in your hosts file or in your internal DNS server
>
> >
> > Thanks,
> >
> > Ike
> >
> >
> >
> >
> > From:   Emmanuel L=E9charny <elecharny@gmail.com>
> > To:     users@directory.apache.org,
> > Date:   08/06/2014 04:28 PM
> > Subject:        Re: SASL DIGEST-MD5 Authentication
> >
> >
> >
> > Le 06/08/14 22:40, Ike Ikonne a =E9crit :
> > > Hi all,
> > >
> > > Again, thanks all for your response;  so, do I need to make any
> > > external configuration other than the configuration to the APACHE=20
DS?
> > > How do I change the default realm to point to my domain realm?
> > > Do I need to install/setup cyrus-sasl library to make this to work?
> >
> > No. We depends on the JVM which supports SASL.
> >
> > What client are you using ?
> >
> >
> >
>
>
> --
> Kiran Ayyagari
> http://keydap.com
>
>


--=20
Kiran Ayyagari
http://keydap.com


--=_alternative 00735C1D86257D35_=--