Re: OpenLDAP 2.1 Released

[Allan Streib <astreib@indiana.edu>]

Regarding {KERBEROS}user@REALM as the userPassword value, 

"Howard Chu" <hyc@highlandsun.com> writes:

> I don't know why anyone would use it. I think it may be a holdover from
> Kerberos IV support in the original UMich distribution, before SASL support
> existed. At any rate, it has always been a bad idea.

While SASL/GSSAPI is clearly preferable, one would use it if one had to
suport LDAP clients that could not do SASL/GSSAPI, but still wanted to use
Kerberos to handle the authentication.

Allan