9.2 Configuring saslauthd to Use LDAP Authentication

  1. From the Computer menu, select Gnome Terminal.

  2. Log in as root by entering su, then enter the root password.

  3. Enter gedit /etc/sysconfig/saslauthd.

  4. Change the line SASLAUTHD_AUTHMECH=pam to SASLAUTHD_AUTHMECH=ldap.

  5. Add a new line: CONFIG_FILE=“/etc/saslauthd.conf”.

  6. Select File > Save to save the file, then select File > Quit to exit.

  7. Enter gedit /etc/saslauthd.conf.

  8. Add a new line: ldap_servers: ldaps://172.17.2.117:636/

    This entry is the LDAP server that saslauthd does an LDAP authentication against. It could be the Identity Manager server or another LDAP server. If you want to use clear text instead of secure text, enter ldap://172.17.2.117. The port number is optional.

  9. Add another line: ldap_search_base: dc=admins,dc=system.

    This is the LDAP context where the user resides that authenticates (binds) to your LDAP server. For the Resource Kit, this is the admin user. If you want other users in the tree to be able to receive and send e-mail, you must specify the users container ou=users,o=company,dc=data.

  10. Select File > Save to save the file, then select File > Quit to exit.

  11. For the changes to take effect, restart saslauthd by entering /etc/init.d/saslauthd restart.

  12. Verify that saslauthd is using LDAP by entering ps -ef | grep saslauthd.

    If saslauthd is using LDAP, it returns /usr/sbin/saslauthd -a ldap.

  13. Enter exit twice to log out as root and close the Gnome Terminal.

  14. Proceed to Section 9.3, Configuring postfix to Use saslauthd.