[Date Prev][Date Next] [Chronological] [Thread] [Top]

Re: ACLs

>>>>> "Wil" == Wil Cooley <wcooley@nakedape.cc> writes:

    Wil> Thus spake Alexander Brinkman:
    >> Here I go again :)
    >> 
    >> Everything with SASL and openLDAP is working now, except for
    >> the ACLs (I think). I understand that there is no direct
    >> relationship between SASL users (in Kerberos or SASLdb) and
    >> LDAP users (uid=xxx,ou=People,dc=domain,dc=org for
    >> instance). But in that case: whats the point of authentication
    >> with SASL?

    Wil> I'd like to know the answer to this question too...  I've so
    Wil> far avoided using SASL because I haven't taken the time to
    Wil> understand it.

Have a look at the following URL. I think I got it (roughly right):
http://www.bayour.com/kerberos/Kerberos-MiniHOWTO.html#why-sasl


-- 
 Turbo     __ _     Debian GNU     Unix _IS_ user friendly - it's just 
 ^^^^^    / /(_)_ __  _   ___  __  selective about who its friends are 
         / / | | '_ \| | | \ \/ /   Debian Certified Linux Developer  
  _ /// / /__| | | | | |_| |>  <  Turbo Fredriksson   turbo@tripnet.se
  \\\/  \____/_|_| |_|\__,_/_/\_\ Stockholm/Sweden