[Date Prev][Date Next] [Chronological] [Thread] [Top]

Re: kerberos support any more?

To: "Brian J. Murrell" <brian@interlinx.bc.ca>
Subject: Re: kerberos support any more?
From: Russ Allbery <rra@stanford.edu>
Date: Mon, 18 Feb 2008 14:36:31 -0800
Cc: openldap-software@openldap.org
In-reply-to: <1203369287.28457.20.camel@pc.ilinx> (Brian J. Murrell's message of "Mon\, 18 Feb 2008 16\:14\:47 -0500")
Organization: The Eyrie
References: <1203369287.28457.20.camel@pc.ilinx>
User-agent: Gnus/5.11 (Gnus v5.11) Emacs/22.1 (gnu/linux)

"Brian J. Murrell" <brian@interlinx.bc.ca> writes:

> I'm noticing this:
> http://www.openldap.org/lists/openldap-bugs/200701/msg00009.html and
> wonder what that really means for OpenLDAP and Kerberos.  Is there no
> longer any support in OpenLDAP for Kerberos?

No, the correct way of supporting Kerberos is by way of SASL, which
OpenLDAP continues to support.  Via SASL you can negotiate GSSAPI
authentication using Kerberos v5.

kbind was a non-SASL authentication mechanism that predated the much
better SASL support and is now obsolete.

-- 
Russ Allbery (rra@stanford.edu)             <http://www.eyrie.org/~eagle/>

Follow-Ups:
- Re: kerberos support any more?
  - From: "Brian J. Murrell" <brian@interlinx.bc.ca>

References:
- kerberos support any more?
  - From: "Brian J. Murrell" <brian@interlinx.bc.ca>

Prev by Date: Re: SSL handshake failure
Next by Date: Re: kerberos support any more?
Index(es):
- Chronological
- Thread