Originally posted by: Tom Lu
One big client is transferring from a Solaris shop to AIX. They has this OpenLDAP server that stores some application data, and the data is accessed using LDAP SASL bind. There seems some SASL compatibility issue in OpenLDAP vs Solaris and AIX. On Solaris, they have to use OpenLDAP tool as a work around to talk to the OpenLDAP server. When they tried the same on AIX, the OpenLDAP from the Linux Toolbox was not even built with SASL enabled.
# rpm -aq |grep ldap
openldap-2.4.45-1.ppc
# ldapsearch -Y external -H ldaps://artex12 -b "" -s base objectclass=*
ldapsearch: not compiled with SASL support
Given that this client is relying on SASL LDAP communication, they definitely need a OpenLDAP that is built with SASL enabled. I believe the OpenLDAP code already has SASL implemented (SASL has been supported by OpenLDAP for many many years) and it could be a matter of turning on the proper flag and rebuilt OpenLDAP to support SASL.
Looking forward to an OpenLDAP package with SASL support - Thanks!