[28681] in Kerberos
Re: MIT Kerberos LDAP backend
daemon@ATHENA.MIT.EDU (Ken Raeburn)
Thu Nov 8 05:49:04 2007
In-Reply-To: <fgpudl$gud$1@news.liv.ac.uk>
Mime-Version: 1.0 (Apple Message framework v752.2)
Message-Id: <0B91C18A-B717-4EF7-9AA0-C5BA3D19490F@mit.edu>
From: Ken Raeburn <raeburn@mit.edu>
Date: Thu, 8 Nov 2007 05:48:38 -0500
To: John Gilbertson <jgilbert@liv.ac.uk>
Cc: kerberos@mit.edu
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: kerberos-bounces@mit.edu
On Nov 6, 2007, at 09:40, John Gilbertson wrote:
> Thanks for the link, but I'm not sure if that will do what we need.
> We're not looking to replace NIS or the like, just add Kerberos as an
> authentication route for various programs with Kerberos support.
Does this mean you're using LDAP for authentication, and looking for
a way Kerberos programs can use the LDAP setup you've already got?
That's not how the LDAP backend works; it's for doing authentication
the Kerberos way, except the database is stored in LDAP. The data we
store is entirely different from what LDAP authentication uses; you
can't just layer one on top of the other.
Ken
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos