Using Kerberos with LDAP - MIT Kerberos Consortium

More documents

Recommendations

Info

Current Status●An OpenLDAP backend has been available inHeimdal since 1999.●●●●Written by Luke Howard @ PADL.Adds KDC data to LDAP account entries,allowing unified administration of accounts.Keys are distinct attributes, not used in LDAPauthentication.Uses IPC to connect to local slapd (ldapi://scheme) thus avoiding chicken'n'egg credentialproblem.
Current Status●Additional module to unify LDAP, Samba, andKerberos authentication added to OpenLDAP in 2004.●Written by Howard Chu @ Symas.● SLAPI version contributed to Red Hat, May 2006.●●●●Can directly authenticate LDAP users against theKDC keys.Generates Samba3 NTLM and Heimdal keys whenLDAP password is changed.Also supports Samba3 password expiration.No other support for password policies.
Page 1 and 2: Kerberos and OpenLDAPHoward ChuCTO,
Page 3 and 4: A Word About Symas● Founded 1999
Page 5: Overview●●●Both Kerberos and
Page 9 and 10: Related Work●Password Policy...
Page 11 and 12: Related Work●Integrated PAM/NSS s
Page 13 and 14: Certificate Authority●Simplified,
Page 15 and 16: Certificate Authorityldapsearch -x
Page 17 and 18: ProxyCache Enhancements●●●●

Using Kerberos with LDAP - MIT Kerberos Consortium

Create successful ePaper yourself

Delete template?

Save as template?