Support for DIGEST-MD5/PLAIN mechanism?

[pchanne]

I am planning to use this for zookeeper sasl authentication with DIGEST-MD5 mechanism. I am running the client on Debian GNU/Linux 8 (jessie).

This is the sample code I am trying to run:

import sasl

saslc = sasl.Client(host='x.x.x.x:port', username='user', password='pass')
saslc.init()
print saslc.start('DIGEST-MD5')
print saslc.getError()

Output:

(False, '', '')
Error in sasl_client_start (-4) SASL(-4): no mechanism available: No worthy mechs found

I get the same error with PLAIN mechanism.

I have the following libraries installed.

ii  libsasl2-2:amd64                   2.1.26.dfsg1-13+deb8u1     amd64        Cyrus SASL - authentication abstraction library
ii  libsasl2-dev                       2.1.26.dfsg1-13+deb8u1     amd64        Cyrus SASL - development files for authentication abstraction library
ii  libsasl2-modules:amd64             2.1.26.dfsg1-13+deb8u1     amd64        Cyrus SASL - pluggable authentication modules
ii  libsasl2-modules-db:amd64          2.1.26.dfsg1-13+deb8u1     amd64        Cyrus SASL - pluggable authentication modules (DB)
ii  libsasl2-modules-gssapi-mit:amd64  2.1.26.dfsg1-13+deb8u1     amd64        Cyrus SASL - pluggable authentication modules (GSSAPI)
ii  libsasl2-modules-ldap:amd64        2.1.26.dfsg1-13+deb8u1     amd64        Cyrus SASL - pluggable authentication modules (LDAP)
ii  libsasl2-modules-otp:amd64         2.1.26.dfsg1-13+deb8u1     amd64        Cyrus SASL - pluggable authentication modules (OTP)
ii  libsasl2-modules-sql:amd64         2.1.26.dfsg1-13+deb8u1     amd64        Cyrus SASL - pluggable authentication modules (SQL)
ii  sasl2-bin                          2.1.26.dfsg1-13+deb8u1     amd64        Cyrus SASL - administration programs for SASL users database

Does the library support DIGEST-MD5 mechanism at all? Are there any other pre-requisites apart from above?

[wesm]

According to https://packages.debian.org/jessie/libsasl2-2, DIGEST-MD5 should be included.

I believe you are missing the service name. Can you add

saslc.setAttr('service', $KERBEROS_SERVICE_NAME)

with the appropriate substitute for your kerberos service name, and let me know what happens?

[wesm]

Oh, actually -- I think parameters you are passing to sasl.Client are being ignored. Please try instead using setAttr for each of the parameters: host, service, username, password

[pchanne]

@wesm Thanks! That did it. Is there a plan to add a documentation around the usage?

[wesm]

Not a "plan" per se, but it'd be great to start a markdown doc showing example usage for different authentication mechanisms. Happy to accept patches.

[dfeinzeig]

@wesm Hi, total SASL newb question, but how can I get started with this to auth using digest-md5? Thanks!