RE: authentication

["Trotta, Johathan R." <trottajr@pweh.com>]

Bill,

disclaimer:  I am learning as I go.  Please confirm below with others.

I think you need to learn about pam_ldap and pam_nss to get UNIX users to
authenticate via ldap.

If you are trying to get NT or winK2 to authenticate using ldap I think
there are basically two worth while approaches that I know of.

1 Configure Samba as PDC and use pam_ldap (I believe there are password sync
issues that require you to do some windows programming.  Basically using an
available nt/wink2 library function (passwordnotify?) to cause password
changes in nt/wink2 to bubble up to the ldap)

2 Modify the GINA (I think Univ of Mich may have a pam_gina available or is
at a minimum working on some type of pam_gina)

J.Trotta
Pratt & Whitney

   

-----Original Message-----
From: Bill Phillips [mailto:bhp@arizona.edu]
Sent: Wednesday, December 20, 2000 8:43 PM
To: openldap-general@OpenLDAP.org
Subject: authentication


Hi all,

I have been tasked with creating an authentication method for some of the
labs here. I am an LDAP newbie. I ahve successfully installed SSL, GDBM, and
LDAP2.0.7 on a Ultra60 running 2.6. I have been looking for an
authentication "front end" as it were or any information regarding using
LDAP for authenticating users. Any direction would be really helpful! Thanks
all