[Date Prev][Date Next] [Chronological] [Thread] [Top]

Re: LDAP & Kerberos

At 11:30 AM 3/10/01 +0100, Alexander Brinkman wrote:
>Hi all,
>
>I'm trying to setup LDAP with Kerberos authentication, and things are
>starting to work (after having read I don't know how many documents and
>archives ;)). However, perhaps someone can clarify a few things that are
>still not quite clear to me...

Install Cyrus SASL and get their sample client/server working with
GSSAPI.  Then try with OpenLDAP.

>When I do an ldapsearch, the results a what an anonymous user would also
>get. (am I correct in this?). If so, is there a way to map/bind the Kerberos
>principal to a uid in the LDAP directory?

In 2.0, no  There is no direct relationship between SASL users
and directory entries.

Kurt