Hi All,

First of all,  Thank you, thank you Simon!! We have been using varients of your LDAP 
patch for years now, and it is most appreciated.

One issue we have had however is that the Sasl 1.5.x and earlier patches all work via 
pwcheck.   This means that authentication is single threaded since all authentication 
requests are processed by a single pwcheck daemon.     This also means a single point 
of failure if pwcheck crashes or stops responding.   A pwcheck daemon makes sense when 
accessing a restricted file like the shadow password file, but it seems like it is 
unnecessary when accessing a remote LDAP server.

Does anyone know if the auxprop plugin approach makes a new LDAP connection for each 
cyrus imapd process?   This is the way I read documentation, but I just started 
looking at the code and I confess it will take a while to wade through it for someone 
like me.   This would be ideal in our environment where we have multiple LDAP servers 
setup in a load balancing/fail over configuration.

Thanks,
John

John Amodeo wrote:

> Simon Loader has a patch in progress for saslv2:
>
> http://www.surf.org.uk/
>
> I downloaded it to do some testing, but I can't get the patch to apply to sasl
> 2.1.2...
> If you have any luck, please pass on your secrets...
>
> -John
>
> Ted Knab wrote:
>
> > Does this mean that I can not run Cyrus 2.x ?
> >
> > I need LDAP authentification.
> >
> > -Ted
> >
> > --- Veigar_Freyr_J$F6kulsson wrote:
> > Is anyone working on an LDAP patch for sasl-2.1 ?
> >
> > --
> > Veigar Freyr
> > [EMAIL PROTECTED]
> >
> > > You'll need sasl version 2.1 for cyrus imapd 2.1.3 :)
> > >
> > > Tarjei
> > >
> > > "Theodore J. Knab" wrote:
> > > >
> > > > I was having a little confusion over the LDAP patch so I want to make
> > sure I used
> > > > the right one.
> > > >
> > > > I downloaded the following:
> > > >
> > > > Cyrus-sasl-1.5.27.tar.gz
> > > > Cyrus-imapd-2.1.3.tar.gz
> > > >
> > > > I then downloaded the LDAP patch:
> > > >
> > > > http://www.surf.org.uk/src/cyrussasl.html
> > > > sasl-1.5.24-LDAP-ssl-filter-mysql-patch4.tgz
> > > >
> > > > I patched sasl.
> > > > patch -p0 <
> > /home/tjk/cyrus/tar-stuff/ldap-mysql_sasl-1.5.24/sasl-ldap+mysql.patch
> > > >
> > > > This seems to have worked even though the docs say use.
> > > > patch < \
> > > > /home/tjk/cyrus/tar-stuff/ldap-mysql_sasl-1.5.24/sasl-ldap+mysql.patch
> > > >
> > > > Is this going to cause any problems ?
> > > >
> > > > Now all I need to do is compile cyrus-sasl -with-ldap=/usr/local/lib
> > > > right?

Reply via email to