Re: Where is info about {KERBEROS} ?

[Harry Rüter <harry_rueter@gmx.de>]

Hi Adam,hi list

Adam Williams wrote:
> 
> >my real question is:
> >the {KERBEROS}-"tag" tells
> >LDAP to use the "service/daemon" of Kerberos
> >to put infomation into the KERBEROS database
> >or to get it out of it.
> 
> I do not think there is any way for LDAP to "write to" the Kerberos
> 'database'.  

No problem, this  just means a little has to do this ..

> Changing of the Kerberos password (credential) is
> accomplished via Kerberos tools, such as pam_krb5 or kpasswd.  LDAP
> simply 'reads' Kerberos via Cyrus-SASL-GSSAPI.

Okidoki, the point is, "do i get back exactly what i put
into KERBEROS 
(for example : i put "pazzword" as pw for a
principal@REALM into KERBEROS.
If a client does a read on the {KERBEROS}principal@REALM -
field 
through LDAP, does he get back "pazzword" ?

greets Harry