[Date Prev][Date Next] [Chronological] [Thread] [Top]

Re: Krb5 TGT location question



At 08:51 AM 9/22/2006, Jeremiah Martell wrote:
>Hmmm. So when I do a LDAP+SASL+GSSAPI(Kerberos) bind, openldap just
>talks to the Kerberos library to do all things kerberos?

OpenLDAP talks to the Cyrus SASL library, which talks with a
GSSAPI library, which talks with a Kerberos library...

Kerberos credential management is left to the Kerberos library.

>What about using the Kerberos service ticket to bind to the server?

Likewise.

Kurt