Disabling/Enabling SASL mechanisms
I have configured Sun One Directory Server 5.2 P4 with SASL DIGEST-MD5 and GSSAPI mechanisms. I want to disable one of the SASL mechanism temporarily and re-enable it later.
Is it possible to do this ? please let me know the procedure for doing the same.
Thanks,
Radhakrishnan
# 1
You can enable and disable the SASL mechanisms via LDAP using ldapmodify.
dn: cn=SASL, cn=security, cn=config
changetype: modify
replace: dsSaslPluginsEnable
-
to remove all enabled mechs.
And
dn: cn=SASL, cn=security, cn=config
changetype: modify
replace: dsSaslPluginsEnable
dsSaslPluginsEnable: DIGEST-MD5
-
to reenable DIGEST-MD5.
I think you may need to restart the server to make sure the changes are applied.
Ludovic