Re: SASL, Kerberos V and LDAP

[Adam Tauno Williams <adam@morrison-ind.com>]

>So I have to install a program which, on executing "passwd", requests a
>service ticket from Kerberos. I didn't find any, and pam_ldap doesn't
>seem to do so as well.

What about using the PAM aware passwd command with pam_krb5?

/etc/pam.d/passwd:
account    required	/lib/security/pam_ldap.so
password   sufficient   /lib/security/pam_ldap.so
password   required	/lib/security/pam_krb5.so use_authtok

I haven't used this but is should be very close.  If you don't know how to setup
PAM/NSS take a look at http://www.kalamazoolinux.org/presentations/20000328/

PAM related questions should probably go to the PAM list, and not the LDAP list.

Systems and Network Administrator
Morrison Industries
1825 Monroe Ave NW.
Grand Rapids, MI. 49505