[28489] in Kerberos
Re: Kerberos OpenLDAP Frontend
daemon@ATHENA.MIT.EDU (Douglas E. Engert)
Tue Sep 25 09:56:21 2007
Message-ID: <46F91373.6040007@anl.gov>
Date: Tue, 25 Sep 2007 08:56:03 -0500
From: "Douglas E. Engert" <deengert@anl.gov>
MIME-Version: 1.0
To: Jonathan Javier Cordoba Gonzalez <jcordoba@uniandes.edu.co>
In-Reply-To: <000001c7ff2e$a2d90aa0$e88b1fe0$@edu.co>
Cc: kerberos@mit.edu
Content-Type: text/plain; charset="windows-1252"
Errors-To: kerberos-bounces@mit.edu
Content-Transfer-Encoding: 8bit
Jonathan Javier Cordoba Gonzalez wrote:
> Hi,
>
>
>
> I’m confuse about the openldap frontend…
>
>
>
> Anybody have a guide, tutorial or a step-by-step procedure in order to make
> the connection, create the initial LDAP DB and how it works??
>
>
>
> I don’t understand the sequence when a user wants authenticate…
You may be confusing the LDAP used by the KDC to store it data,
and an LDAP used by something like nss-ldap that stores what
would have been found on /etc/passwd or NIS.
So kinit and pam_krb5 can do the authentication as they always have,
to the KDC, then when kinit or pam_krb5 calls getpwnam this calls
the nss-ldap routines via /etc/nsswitch.conf.
>
>
>
> Thanks a lot.
>
>
>
> Jonathan Córdoba
>
> Certified Ethical Hacker (CEH)
>
> GIAC Certified Forensics Analyst (GCFA)
>
> CompTIA Security+ Certified Professional
>
> Ing. Seguridad Universidad de los Andes
>
> Dirección de Tecnologías de Información (D.T.I.)
>
> Bogotá - Colombia
>
>
>
> ________________________________________________
> Kerberos mailing list Kerberos@mit.edu
> https://mailman.mit.edu/mailman/listinfo/kerberos
>
>
--
Douglas E. Engert <DEEngert@anl.gov>
Argonne National Laboratory
9700 South Cass Avenue
Argonne, Illinois 60439
(630) 252-5444
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
