[Date Prev][Date Next] [Chronological] [Thread] [Top]

Re: userPassword: {KERBEROS}/{SASL} help!

To: openldap-software@OpenLDAP.org
Subject: Re: userPassword: {KERBEROS}/{SASL} help!
From: Turbo Fredriksson <turbo@bayour.com>
Date: Sun, 20 Feb 2005 12:00:47 +0100
In-reply-to: <20050219185445.GB88328@black.fajita.org> (Lewis Thompson's message of "Sat, 19 Feb 2005 18:54:45 +0000")
Organization: LDAP/Kerberos expert wannabe
References: <20050219185445.GB88328@black.fajita.org>
User-agent: Gnus/5.1006 (Gnus v5.10.6) Emacs/20.7 (gnu/linux)

>>>>> "Lewis" == Lewis Thompson <purple@fajita.org> writes:

    Lewis> I have searched quite a lot to find out how to do this with
    Lewis> ``broken'' software (really software that just doesn't
    Lewis> understand SASL or GSSAPI) and it seems to be through
    Lewis> setting userPassword to {KERBEROS}principal@REALM or
    Lewis> {SASL}...

Nowadays, only {SASL} is supported. You must however configure the
'saslauthd' that comes with Cyrus SASL v2.1. My command line looks
like:

        /usr/sbin/saslauthd -m /var/run/saslauthd -n 3 -c -l -a kerberos5

You should run this on the LDAP server...

Follow-Ups:
- OpenLDAP - versioning/stability questions
  - From: "Richard L. Goerwitz III" <richard@goerwitz.com>

References:
- userPassword: {KERBEROS}/{SASL} help!
  - From: Lewis Thompson <purple@fajita.org>

Prev by Date: Re: Using dyngroup
Next by Date: Openldap scalability issues
Index(es):
- Chronological
- Thread