foo.sh/ansible
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

saslauthd: Convert ldap to use fastbind

Browse source 
Seems that cert auth always returns success even for invalid passwords. :)
This commit is contained in:
Timo Makinen 2021-03-16 11:51:10 +00:00
parent 0f6d33072e
commit c1ee7e81d0
1 changed files with 2 additions and 4 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

6
roles/saslauthd/templates/saslauthd.conf.j2
View file

@ -5,7 +5,5 @@ ldap_search_base: {{ ldap_basedn }}
ldap_tls_check_peer: yes
ldap_tls_cacert_file: {{ tls_bundle }}
ldap_use_sasl: yes
ldap_mech: EXTERNAL
ldap_tls_cert: {{ tls_certs }}/{{ inventory_hostname }}.crt
ldap_tls_key: {{ tls_private }}/{{ inventory_hostname }}.key
ldap_auth_method: fastbind
ldap_filter: uid=%u,ou=People,{{ ldap_basedn }}