From mboxrd@z Thu Jan  1 00:00:00 1970
Return-Path: <haw@inbox.ru>
X-Spam-Checker-Version: SpamAssassin 3.2.3 (2007-08-08) on sa.int.altlinux.org
X-Spam-Level: 
X-Spam-Status: No, score=-2.0 required=5.0 tests=AWL,BAYES_00 autolearn=ham
	version=3.2.3
From: =?utf-8?b?0JLQu9Cw0LTQuNC80LjRgA==?= <haw@inbox.ru>
To: ALT Linux sysadmin discuss <sysadmins@lists.altlinux.org>
Date: Fri, 28 Dec 2007 01:23:09 +0300
User-Agent: KMail/1.9.7
References: <200712231933.19415.haw@inbox.ru> <200712261354.25326.haw@inbox.ru>
	<6c7be88d0712260348o9ab6219meb2e562bdf2d16ea@mail.gmail.com>
In-Reply-To: <6c7be88d0712260348o9ab6219meb2e562bdf2d16ea@mail.gmail.com>
MIME-Version: 1.0
Content-Type: text/plain;
  charset="utf-8"
Content-Transfer-Encoding: 8bit
Content-Disposition: inline
Message-Id: <200712280123.09893.haw@inbox.ru>
X-Spam: Not detected
Subject: Re: [Sysadmins] LDAP
X-BeenThere: sysadmins@lists.altlinux.org
X-Mailman-Version: 2.1.9
Precedence: list
Reply-To: ALT Linux sysadmin discuss <sysadmins@lists.altlinux.org>
List-Id: ALT Linux sysadmin discuss <sysadmins.lists.altlinux.org>
List-Unsubscribe: <https://lists.altlinux.org/mailman/listinfo/sysadmins>,
	<mailto:sysadmins-request@lists.altlinux.org?subject=unsubscribe>
List-Archive: <http://lists.altlinux.org/pipermail/sysadmins>
List-Post: <mailto:sysadmins@lists.altlinux.org>
List-Help: <mailto:sysadmins-request@lists.altlinux.org?subject=help>
List-Subscribe: <https://lists.altlinux.org/mailman/listinfo/sysadmins>,
	<mailto:sysadmins-request@lists.altlinux.org?subject=subscribe>
X-List-Received-Date: Thu, 27 Dec 2007 22:23:11 -0000
Archived-At: <http://lore.altlinux.org/sysadmins/200712280123.09893.haw@inbox.ru/>
List-Archive: <http://lore.altlinux.org/sysadmins/>

вот что-то вроде нащупал.
==> sasl_bind: dn="cn=admin,dc=firma,dc=lan" mech=SRP datalen=19
SASL Canonicalize [conn=2]: authcid="root"
slap_sasl_getdn: conn 2 id=root [len=4]
=> ldap_dn2bv(16)
<= ldap_dn2bv(uid=root,cn=SRP,cn=auth)=0
slap_sasl_getdn: u:id converted to uid=root,cn=SRP,cn=auth
>>> dnNormalize: <uid=root,cn=SRP,cn=auth>
=> ldap_bv2dn(uid=root,cn=SRP,cn=auth,0)
<= ldap_bv2dn(uid=root,cn=SRP,cn=auth)=0
=> ldap_dn2bv(272)
<= ldap_dn2bv(uid=root,cn=srp,cn=auth)=0
<<< dnNormalize: <uid=root,cn=srp,cn=auth>
==>slap_sasl2dn: converting SASL name uid=root,cn=srp,cn=auth to a DN
slap_authz_regexp: converting SASL name uid=root,cn=srp,cn=auth
<==slap_sasl2dn: Converted SASL name to <nothing>
SASL Canonicalize [conn=2]: slapAuthcDN="uid=root,cn=srp,cn=auth"
SASL Canonicalize [conn=2]: authzid="root"
SASL [conn=2] Failure: no secret in database
send_ldap_result: conn=2 op=1 p=3
send_ldap_result: err=49 matched="" text="SASL(-13): user not found: no secret 
in database"
send_ldap_response: msgid=2 tag=97 err=49
ber_flush: 62 bytes to sd 14

кстати, если под рута входить просто с su, то тогда использует uid 
пользователя.
откуда srp и что это такое?