[28532] in Kerberos
Re: Kerberos OpenLDAP Frontend
daemon@ATHENA.MIT.EDU (Simon Wilkinson)
Fri Oct 5 07:26:41 2007
In-Reply-To: <fe39s2$557$2@news.Stanford.EDU>
Mime-Version: 1.0 (Apple Message framework v752.3)
Message-Id: <3D772DDA-5C28-447D-B660-832C2F8B580E@sxw.org.uk>
From: Simon Wilkinson <simon@sxw.org.uk>
Date: Fri, 5 Oct 2007 12:25:43 +0100
To: Booker Bense <bbense@telemark.slac.stanford.edu>
Cc: kerberos@mit.edu
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: kerberos-bounces@mit.edu
On 4 Oct 2007, at 19:02, Booker Bense wrote:
>
> The only reason to put in a LDAP back end is to simplify the
> account management
One thing I keep thinking about implementing is an LDAP->kadmin
proxy. You'd still have the KDC database in the current DB format,
but you'd be able to access it through an overlay on your OpenLDAP
server, which would translate LDAP actions into kadmin RPCs.
S.
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
