[Date Prev][Date Next] [Chronological] [Thread] [Top]

Re: Change LDAP User's Password

To: Le Trung Kien <aloneattack@gmail.com>
Subject: Re: Change LDAP User's Password
From: Michael Ströder <michael@stroeder.com>
Date: Mon, 25 Feb 2008 12:18:05 +0100
Cc: openldap-technical@openldap.org
In-reply-to: <cb25fa940802241813q6d0a806as35237b93b6376823@mail.gmail.com>
References: <cb25fa940801291815t4f10b3b4p17044e56e6bd40ac@mail.gmail.com> <47A0421D.8060407@stroeder.com> <cb25fa940802241813q6d0a806as35237b93b6376823@mail.gmail.com>
User-agent: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.8.1.11) Gecko/20071128 SeaMonkey/1.1.7

Le Trung Kien wrote:

I try to use Kerberos to authenticate some services support it.


Which is your KDC?

I want to use Kerberos for authentication and LDAP for authorization in my system. At current step I can allow users to login using LDAP, and users must get a ticket to use some LDAP's tools. And as you see, I'm confused a bit. That system have two passwords for an user and they just can change one of them. Two passwords can be used to login.

You should simply allow normal users to login via pam_krb5. So normal users would only need the Kerberos password.

Ciao, Michael.

Follow-Ups:
- Re: Change LDAP User's Password
  - From: "Le Trung Kien" <aloneattack@gmail.com>

References:
- Re: Change LDAP User's Password
  - From: "Le Trung Kien" <aloneattack@gmail.com>

Prev by Date: RE: LDAP Writes are not propagated to mirror nodes.
Next by Date: Re: LDAP Writes are not propagated to mirror nodes.
Index(es):
- Chronological
- Thread