Re: Authenticate to ldap using Kerberos

[masarati@aero.polimi.it]

>> Quanah, I know that in the past you, Howard and others have contributed
>> pieces of software to other LDAP-enabled software to enable SASL auth.
>>
>> I had myself some bad experience in contributing things to software
>> maintainers that did not even understand the need or the importance of
>> what I was trying to contribute, but that's another story.
>>
>> Maybe we could try, as the OpenLDAP project rather than as individuals,
>> to
>> promote and support better LDAP (not just OpenLDAP) integration in other
>> generally useful FLOSS that can interact with OpenLDAP.
>
> I'm ok with spending time on this, but I don't use evolution and have no
> direct need to get it working. How do we decide which "generally useful
> FLOSS"
> should get our attention?

Well, the users of LDAP-capable FLOSS should :).  My point is that
developers of some LDAP-capable software, possibly pushed by requests from
their users, should ask for support in better LDAP-enabling their
software.  This is not because LDAP-enabling software requires software
sorcerers; only, with the support of the OL project it would probably
require much less effort, and possibly lead to much better results.  Think
for example how long it took you to write ldapdb for SASL.

Of course this is not going to happen out of the blue; we'd probably need
to advertise our availability, and give minimal commitment (in this, of
course, everybody would commit only for himself).  For example, users
could "audit" the LDAP-friendliness of other software, and identify room
for improvement.

p.