[Fedora-directory-users] Kerberos database in FDS?

[Richard Megginson]

Andrey Ivanov wrote:

>Hi,
>
>I was wondering if anyone tried a configuration with Kerberos using
>LDAP as database. After some searching it seems that MIT kerberos is
>not capable to do that.
>
Newer versions of MIT are better at this - they have more support for 
pluggable databases.

>However, Heimdal has a special option for
>that. The only problem is that this option is applicable only to
>openldap and only to unix socket connections. At least that's what is
>told in the doc and in numerous howtos.
>
That is correct.  I suppose Heimdal could be hacked to use a regular tcp 
socket instead of the ldapi interface.

>There is also a special schema
>extension for storing these data in openLDAP. I haven't found these
>objects (krb* or kerberos*) in FDS schema....
>  
>
It's not included with Fedora DS, but you could easily convert it and 
add it.

>Can anyone tell anything about a possibility of using Kerberos with
>the key/principals database stored in Fedora Directory Server, please?
>
>
>Thank you
>
>Andrey Ivanov
>tel +33-(0)1-69-33-99-24
>fax +33-(0)1-69-33-99-55
>
>Direction des Systemes d'Information
>Ecole Polytechnique
>91128 Palaiseau CEDEX
>France
>
>--
>Fedora-directory-users mailing list
>Fedora-directory-users at redhat.com
>https://www.redhat.com/mailman/listinfo/fedora-directory-users
>  
>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/x-pkcs7-signature
Size: 3178 bytes
Desc: S/MIME Cryptographic Signature
URL: <http://listman.redhat.com/archives/fedora-directory-users/attachments/20060202/4b87219f/attachment.bin>