[31457] in Kerberos
Re: ldap-backend with kerberos
daemon@ATHENA.MIT.EDU (Greg Hudson)
Wed Sep 9 11:11:23 2009
From: Greg Hudson <ghudson@MIT.EDU>
To: Julian =?ISO-8859-1?Q?Thom=E9?= <frostisch@yahoo.de>
In-Reply-To: <4AA77F8C.9070201@yahoo.de>
Date: Wed, 09 Sep 2009 11:08:31 -0400
Message-Id: <1252508911.18351.245.camel@ray>
Mime-Version: 1.0
Cc: "kerberos@mit.edu" <kerberos@MIT.EDU>
Content-Type: text/plain; charset="utf-8"
Errors-To: kerberos-bounces@MIT.EDU
Content-Transfer-Encoding: 8bit
On Wed, 2009-09-09 at 06:12 -0400, Julian Thomé wrote:> Hello mailing list,> > We want to integrate Kerberos with our existing > User-Authentication-System using PAM-LDAP thus ... we want to use ldap > as a backend for kerberos.> That means that user data like password, username, uid etc. ist stored > in the LDAP-DB and we want kerberos to user this data.> Is this possible in this way ?
Yes, this is possible in krb5 1.6 and later. There are instructions inthe admin guide. You may need a copy of the source tree to getkerberos.schema from.
Setup can be a little tricky to get right, depending on how familiar youare with your OpenLDAP setup.
________________________________________________Kerberos mailing list Kerberos@mit.eduhttps://mailman.mit.edu/mailman/listinfo/kerberos
