Re: OpenLDAP + Kerberos

[Turbo Fredriksson <turbo@bayour.com>]

>>>>> "Beck" == Beck Zoltan Gyula <beckzg@midnight.hu> writes:

    Beck> the MIT Kerberos, my problem is how can I use the kerberos
    Beck> authentication in ldap?

I thought my document was very clear in this regard...

I set the userPassword to '{KERBEROS}principal' and I'm
home free...

Now, if you're using 2.1.23, you have a (slight) problem. That
feature have been 'removed' (or at least disabled). I don't 
agree (and so are some others) against this, but...

This is a snippet from a mail on this list a couple of days ago:

----- s n i p -----
From: "Kurt D. Zeilenga" <Kurt@OpenLDAP.org>
Subject: Re: kpasswd
Cc: openldap-software@OpenLDAP.org
Date: Wed, 15 Oct 2003 12:05:15 -0700

At 08:32 AM 10/15/2003, Allan E Johannesen wrote:
>It appears that the --enable-kpasswd option is gone from openldap 2.1.23

Use
        env ol_enable_kpasswd=yes ./configure
instead.

That is, the feature (as broken as it is) still remains.
----- s n i p -----


Before enabling this, you might want to follow the thread,
and (hope) for a resolution to this. Othervice, you'll
have bigger problems when the feature is finaly removed.

It WILL be removed eventually, unless we can convince
Kurt and the core team to keep it (and the only way we
can do that is if someone steps forward to maintain that
part of the code).