[27177] in Kerberos
krb5-sync 0.3 released
daemon@ATHENA.MIT.EDU (Russ Allbery)
Fri Jan 5 22:25:40 2007
From: Russ Allbery <rra@stanford.edu>
To: kerberos@mit.edu
Date: Fri, 05 Jan 2007 19:25:11 -0800
Message-ID: <87k60025wo.fsf@windlord.stanford.edu>
MIME-Version: 1.0
Posted-To: comp.protocols.kerberos
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: kerberos-bounces@mit.edu
I'm pleased to announce the initial public release of krb5-sync.
krb5-sync is a toolkit for updating passwords and account status from an
MIT Kerberos master KDC to Active Directory and/or an AFS kaserver. It is
implemented as a patch to kadmind and a plugin module that will push
password changes and selected account flag changes to Active Directory or
to a kaserver at the same time as they are made to the local KDC database.
Please note that this is a toolkit, not a simple application. You will at
a minimum need to patch MIT Kerberos and build a new kadmin server library
to make use of it, and the code has various peculiarities local to
Stanford and will likely need changes for any other site. We're making it
available for feedback and to help other people with similar problems.
My long-term hope is to standardize on a plugin interface that MIT is
willing to incorporate, and then make this a more normal package that
provides that plugin. This is still some distance away, however.
You can download it from:
<http://www.eyrie.org/~eagle/software/krb5-sync/>
Please let me know of any problems or feature requests not already listed
in the TODO file.
--
Russ Allbery (rra@stanford.edu) <http://www.eyrie.org/~eagle/>
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
