[Date Prev][Date Next] [Chronological] [Thread] [Top]

Re: Question on bind using Kerberos Service Ticket.

To: Austin Cherian <austin.cherian@gmail.com>
Subject: Re: Question on bind using Kerberos Service Ticket.
From: Howard Chu <hyc@symas.com>
Date: Mon, 26 Nov 2007 08:32:14 -0800
Cc: openldap-software@openldap.org
In-reply-to: <8a4252c10711260734r3fb89770i47380fc767b0ec4@mail.gmail.com>
References: <8a4252c10711251051ncabb00cw5f24b8d773e7ee52@mail.gmail.com> <8a4252c10711260734r3fb89770i47380fc767b0ec4@mail.gmail.com>
User-agent: Mozilla/5.0 (X11; U; Linux i686; rv:1.9b2pre) Gecko/2007111122 SeaMonkey/2.0a1pre

Austin Cherian wrote:

Hi,
   Im quite new to Openldap and am searching for answers to some
questions on a particular case i have, i'd be glad if some one could
help me out on this particular topic.

I have a situation where i have to perform an LDAP bind to a given
LDAP server with only being provided a service ticket to that
particular LDAP server and nothing else, i have already explored the
possibility of using SASL authentication method with GSSAPI as the
mechanism, however i guess the GSSAPI mechanism takes user credentials
as input and moves through the Kerberos protocol to finally provide
the LDAP server with the service ticket.


Wrong. The GSSAPI mechanism does exactly what you're looking for.
--
  -- Howard Chu
  Chief Architect, Symas Corp.  http://www.symas.com
  Director, Highland Sun        http://highlandsun.com/hyc/
  Chief Architect, OpenLDAP     http://www.openldap.org/project/

Follow-Ups:
- Re: Question on bind using Kerberos Service Ticket.
  - From: "Austin Cherian" <austin.cherian@gmail.com>

References:
- Question on bind using Kerberos Service Ticket.
  - From: "Austin Cherian" <austin.cherian@gmail.com>

Prev by Date: chain and ppolicy question
Next by Date: Re: Question on bind using Kerberos Service Ticket.
Index(es):
- Chronological
- Thread