[31276] in Kerberos
Re: Authentication Windows client against Kerberos MIT and
daemon@ATHENA.MIT.EDU (Javier Palacios)
Tue Jun 23 13:37:25 2009
MIME-Version: 1.0
In-Reply-To: <5888FCB767AD5F41A65DC0DCFE91C921102C8C0D@EDC-SUW-EXCH.edeltacom.biz>
Date: Tue, 23 Jun 2009 19:36:20 +0200
Message-ID: <a64bf030906231036m35b0cc37uf1e9b1518bf25199@mail.gmail.com>
From: Javier Palacios <javiplx@gmail.com>
To: "Mendez, Franklyn" <fmendez@qualitytech.com>
Cc: kerberos@mit.edu
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: kerberos-bounces@mit.edu
Hello,
Besides samba, you could have a look to pGina. You have for sure ldap
authentication + authorization, but I don't remember a mixed
kerberos-ldap (I search that about two years ago)
There is also a Windows SSP that allowed you to do what you want, and
a couple of things you maybe are only thinking on, as create
authorized accounts on the fly. I'm not aware of improvements (again
since two years), but I did the work more or less nicely (needed to
patch to not remove local accounts if something fails). It is at
http://sc-ap.sourceforge.net/
I cannot tell you if any of these allow any kind of roaming profile,
in case you need it.
Javier Palacios
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos