[28490] in Kerberos
RE: Kerberos OpenLDAP Frontend
daemon@ATHENA.MIT.EDU (Jonathan Javier Cordoba Gonzalez)
Tue Sep 25 10:00:56 2007
Date: Tue, 25 Sep 2007 08:59:57 -0500
From: Jonathan Javier Cordoba Gonzalez <jcordoba@uniandes.edu.co>
In-reply-to: <46F91373.6040007@anl.gov>
To: kerberos@mit.edu
Message-id: <000301c7ff7c$5b1c5700$11550500$@edu.co>
MIME-version: 1.0
Content-language: es-co
Content-Type: text/plain; charset="iso-8859-1"
Errors-To: kerberos-bounces@mit.edu
Content-Transfer-Encoding: 8bit
Hi Douglas,
I actually try to use the LDAP to store the KDC data... I guess that it
means more performance and administrative...
Jonathan Córdoba
Certified Ethical Hacker (CEH)
GIAC Certified Forensics Analyst (GCFA)
CompTIA Security+ Certified Professional
Ing. Seguridad Universidad de los Andes
Dirección de Tecnologías de Información (D.T.I.)
Bogotá - Colombia
-----Original Message-----
From: Douglas E. Engert [mailto:deengert@anl.gov]
Sent: Martes, 25 de Septiembre de 2007 08:56 a.m.
To: Jonathan Javier Cordoba Gonzalez
Cc: kerberos@mit.edu
Subject: Re: Kerberos OpenLDAP Frontend
Jonathan Javier Cordoba Gonzalez wrote:
> Hi,
>
>
>
> I’m confuse about the openldap frontend…
>
>
>
> Anybody have a guide, tutorial or a step-by-step procedure in order to
make
> the connection, create the initial LDAP DB and how it works??
>
>
>
> I don’t understand the sequence when a user wants authenticate…
You may be confusing the LDAP used by the KDC to store it data,
and an LDAP used by something like nss-ldap that stores what
would have been found on /etc/passwd or NIS.
So kinit and pam_krb5 can do the authentication as they always have,
to the KDC, then when kinit or pam_krb5 calls getpwnam this calls
the nss-ldap routines via /etc/nsswitch.conf.
>
>
>
> Thanks a lot.
>
>
>
> Jonathan Córdoba
>
> Certified Ethical Hacker (CEH)
>
> GIAC Certified Forensics Analyst (GCFA)
>
> CompTIA Security+ Certified Professional
>
> Ing. Seguridad Universidad de los Andes
>
> Dirección de Tecnologías de Información (D.T.I.)
>
> Bogotá - Colombia
>
>
>
> ________________________________________________
> Kerberos mailing list Kerberos@mit.edu
> https://mailman.mit.edu/mailman/listinfo/kerberos
>
>
--
Douglas E. Engert <DEEngert@anl.gov>
Argonne National Laboratory
9700 South Cass Avenue
Argonne, Illinois 60439
(630) 252-5444
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
