OpenLDAP Faq-O-Matic : OpenLDAP Software FAQ : Integration : How can OpenLDAP, Cyrus-SASL, OpenSSL and KerberosV be combined? | |
OpenLDAP and Cyrus SASL versions: OpenLDAP 2.1 and later only supports Cyrus SASL 2.1 and later. | |
MIT Kerberos V libraries are not thread-safe. Use Heimdal Kerberos or build OpenLDAP --without-threads.
| |
OpenLDAP supports Kerberos authentication via the SASL/GSSAPI authentication mechanism. That is, you just need to build Cyrus SASL with GSSAPI support, (using Heimdal Kerberos V libraries) and then build OpenLDAP with Cyrus SASL support. If you're trying to use Kerberos for Simple Binds, see the link below about the {KERBEROS} password scheme. | |
See also:
How does one use LDAP authentication with PAM? How does one integrate LDAP with name services using NSS? How do I use TLS/SSL? Is there an alternative to {KERBEROS} passwords in current versions of slapd(8)? | |
See also:
Is there an alternative to {KERBEROS} passwords in current versions of slapd(8)?
| |
[Append to This Answer] | |
hyc@openldap.org, Kurt@OpenLDAP.org, danpritts@yahoo.com |
Previous: | How does one integrate LDAP with name services using NSS? |
Next: | How to use LDAP for managing DNS zones? |
|