Re: LDAPv3 a nightmare

To: OpenLDAP-software@OpenLDAP.org
Subject: Re: LDAPv3 a nightmare
From: Eric G Ortego <eric@tonychachere.com>
Date: Thu, 26 Feb 2004 10:14:52 -0600
In-reply-to: <11948170.1077721903@cadabra.stanford.edu>
References: <403D12E4.1070207@tonychachere.com> <11948170.1077721903@cadabra.stanford.edu>
User-agent: Mozilla/5.0 (X11; U; Linux ppc; en-US; rv:1.6) Gecko/20040224

Quanah Gibson-Mount wrote:

Working SASL configuration, no -- cyrus-sasl comes with a test server & client you can use.

So I dont need to have saslauthd running for sasl binds?

And why does sasl use pam?
It doesn't.

saslauthd -v
saslauthd 2.1.14
authentication mechanisms: getpwent kerberos5 pam rimap shadow ldap

It depends on the data you want to consolidate. Some Kerberos implementations (like Heimdal) can have a KDC in the LDAP directory.

I assume what you mean by have a KDC in LDAP is the keytabs and principals?
Is there a pro's and con's list on Heimdal vs MIT kerberos?

Follow-Ups:
- Re: LDAPv3 a nightmare
  - From: Tony Earnshaw <tonye@billy.demon.nl>

References:
- LDAPv3 a nightmare
  - From: Eric G Ortego <eric@tonychachere.com>
- Re: LDAPv3 a nightmare
  - From: Quanah Gibson-Mount <quanah@stanford.edu>