1 message in net.sourceforge.lists.courier-users[courier-users] Courier-Authlib : lda...
FromSent OnAttachments
FMJan 27, 2005 6:55 am 
Actions with this message:
Paste this link in email or IM:
Paste this link in email or IM:
Atom feed for this thread
Paste this URL into your reader:
Subject:[courier-users] Courier-Authlib : ldap simple bindActions...
From:FM (dist@LEXUM.UMontreal.CA)
Date:Jan 27, 2005 6:55:31 am
List:net.sourceforge.lists.courier-users

Hello We have set a openldap/kerberos server for users authentification. Openldap is configured with sasl and userpassword look like this : UserPassword: {SASL}user@REALM

With this technique, I can connect to my ldap server (with my kerberos password using saslauthd) with a simple BIND. So the client (ldapsearch for example) does not need to know that passwords are in KRB5 DB (I do not need -Y to force GSSAPI, -x is fine).

With this in mind (openldap can use simple bind to connect to kerberos), can I use openldap as my users/passwords backend ?

Or can I "simply" use pam_krb5 for KRB5 password and openldap as my users DB ?

Thanks !