[Date Prev][Date Next] [Chronological] [Thread] [Top]

RE: Kerberos + SASL question..

To: openldap-software@OpenLDAP.org
Subject: RE: Kerberos + SASL question..
From: "Manel Euro" <euro_32@hotmail.com>
Date: Tue, 22 Mar 2005 17:37:35 +0000
In-reply-to: <BAY12-F1646AC7F880CA19CB97C0B9C4E0@phx.gbl>


Hello,

I am having problems understanding kerberos, LDAP and Cyrus SASL interaction.

I am using LDAP to store the users information like uid, home directory, grouid, geco (passwd without the password field). I have kerberos configured and working.

I understand that SASL is a layer that provides authentication mechanims to protocols like LDAP. By using GSSAPI, as soon as I get a Kerberos TGT I will be allowed to get a TGS for LDAP. However, if the LDAP directory holds my userid and groupid, necessary to pam_krb5, and if I need a TGT to access a TGS for ldap how will I be able to login.

If  I have the concepts wrong please let me know.

Regards,
Francisco

_________________________________________________________________ On the road to retirement? Check out MSN Life Events for advice on how to get there! http://lifeevents.msn.com/category.aspx?cid=Retirement

Prev by Date: Re: slapd: Too many open files
Next by Date: Re: Kerberos + SASL question
Index(es):
- Chronological
- Thread