"no mechanism available" from CLI

[Andreas-Johann Ulvestad]

Short story:
After setting up 389 and adding users I attempt to run ldappasswd on a
test user. The error message I get is:
SASL/EXTERNAL authentication started
ldap_sasl_interactive_bind_s: Unknown authentication method (-6)
	additional info: SASL(-4): no mechanism available: 


Long story:
I installed Fedora 15 and then 389 via yum. All packages were downloaded
without any problems and setup-ds-admin.pl had no problems either. I
then launched the admin console and added two test users with POSIX
accounts.

After this, I launched authconfig-tui and configured it as so:
 User Information: Cache, use LDAP
 Authentication: shadow passwords, LDAP auth, local auth sufficient
 No TLS
 Server ldap://localhost
 Base DN: dc=k,dc=unicornis,dc=no		

As said earlier, ldappasswd doesn't work (I use ldappasswrd -h
localhost). However, ldapsearch works (see attached output).

I appreciate any feedback on how to start debugging this :-).

[Angel Bosch Mora]

for certain operations you must configure a certificate on server and client.

there's a couple of howtos on the wiki about that.


----- Missatge original -----
>  Short story:
>  After setting up 389 and adding users I attempt to run ldappasswd on a
>  test user. The error message I get is:
>  SASL/EXTERNAL authentication started
>  ldap_sasl_interactive_bind_s: Unknown authentication method (-6)
>  additional info: SASL(-4): no mechanism available:
>  
>  
>  Long story:
>  I installed Fedora 15 and then 389 via yum. All packages were
>  downloaded without any problems and setup-ds-admin.pl had no problems
>  either. I
>  then launched the admin console and added two test users with POSIX
>  accounts.
>  
>  After this, I launched authconfig-tui and configured it as so:
>  User Information: Cache, use LDAP
>  Authentication: shadow passwords, LDAP auth, local auth sufficient
>  No TLS
>  Server ldap://localhost
>  Base DN: dc=k,dc=unicornis,dc=no
>  
>  As said earlier, ldappasswd doesn't work (I use ldappasswrd -h
>  localhost). However, ldapsearch works (see attached output).
>  
>  I appreciate any feedback on how to start debugging this :-).
>  
>  
>  -- 389 users mailing list
>  389-users(a)lists.fedoraproject.org
>  https://admin.fedoraproject.org/mailman/listinfo/389-users

[Rich Megginson]

On 05/30/2011 08:44 AM, Andreas-Johann Ulvestad wrote:
>  Short story:
>  After setting up 389 and adding users I attempt to run ldappasswd on a
>  test user. The error message I get is:
>  SASL/EXTERNAL authentication started
>  ldap_sasl_interactive_bind_s: Unknown authentication method (-6)
>  	additional info: SASL(-4): no mechanism available:
>
>
>  Long story:
>  I installed Fedora 15 and then 389 via yum. All packages were downloaded
>  without any problems and setup-ds-admin.pl had no problems either. I
>  then launched the admin console and added two test users with POSIX
>  accounts.
>
>  After this, I launched authconfig-tui and configured it as so:
>    User Information: Cache, use LDAP
>    Authentication: shadow passwords, LDAP auth, local auth sufficient
>    No TLS
>    Server ldap://localhost
>    Base DN: dc=k,dc=unicornis,dc=no		
>
>  As said earlier, ldappasswd doesn't work (I use ldappasswrd -h
>  localhost). However, ldapsearch works (see attached output).
>
>  I appreciate any feedback on how to start debugging this :-). 
When using the
/usr/bin/ldap* commands, you must pass the -x argument to 
disable SASL and use simple bind.
>  --
>  389 users mailing list
>  389-users(a)lists.fedoraproject.org
>  https://admin.fedoraproject.org/mailman/listinfo/389-users