1 message in net.sourceforge.lists.courier-users[courier-users] Courier-Authlib : ker...
FromSent OnAttachments
FMJan 25, 2005 5:29 pm 
Actions with this message:
Paste this link in email or IM:
Paste this link in email or IM:
Atom feed for this thread
Paste this URL into your reader:
Subject:[courier-users] Courier-Authlib : kerberos 5 through ldap and sasl (simple BIND)Actions...
From:FM (dist@lexum.umontreal.ca)
Date:Jan 25, 2005 5:29:50 pm
List:net.sourceforge.lists.courier-users

Hello We have set a openldap/kerberos server for users authentification. Openldap is configured with sasl and userpassword look like this : UserPassword: {SASL}user@REALM

With this technique, I can connect to my ldap server (with my kerberos password using saslauthd) with a simple BIND. So the client (ldapsearch for example) does not need to know that passwords are in KRB5 DB (I do not need -Y to force GSSAPI, -x is fine).

With this in mind (openldap can use simple bind to connect to kerberos), can I use openldap as my users/passwords backend ?

Or can I "simply" use pam_krb5 for KRB5 password and openldap as my users DB ?

Thanks !