Re: Openldap, kerberos backend, and SASL

[Michael Ströder <michael@stroeder.com>]

Da Rock wrote:
> Openldap has a good documentation project, but they have no idea of the
> Heimdal implementation

Note that

1. you can build OpenLDAP as kerberized demon with both KRB5
implementations (heimdal and MIT) and

2. you can also use recent versions of the MIT KDC with a LDAP backend
(not only OpenLDAP's slapd). To make matters worse both schemas differ.

Given that I think it's outside the scope of the OpenLDAP admin guide to
speak about how to use OpenLDAP as a heimdal LDAP backend.

Ciao, Michael.