[Fedora-directory-users] SASL/Kerberos5 question

Richard Megginson rmeggins at redhat.com
Tue Nov 21 15:41:41 UTC 2006


koniczynek wrote:
> koniczynek napisał(a):
>> koniczynek napisał(a):
>>> OK, where I can read about that? Doc and wiki seems to have no PAM in
>>> them. And is this equal to what I have configured with OpenLDAP? 
>>> Because
>>> when migrating, FDS should support old authentication method (with
>>> 'uid at REALM.NET' in the 'userPassword' field and passwords in Kerberos).
>> ok, maybe this will give someone a clue on what do I need to 
>> configure. In my OpenLDAP configuration file (slapd.conf) I have the 
>> following lines:
>>
>> sasl-realm COMPANY.INT
>> sasl_realm COMPANY.INT
>> sasl-host ldap.company.int
>> sasl_host ldap.company.int
>>
>> and in the 'userPassword' field is what I mentioned above. Could 
>> anybody help me?
> As somebody earlier mentioned PAM pass through plugin is the best way 
> to accomplish this. And for people, who are looking for documentation 
> for this plugin, it can be found in the README in the plugin source 
> directory (in fedora directory server 1.0.4 for example).
And now that the server is back up, in cvs.fedora.redhat.com:

README - 
http://cvs.fedora.redhat.com/viewcvs/ldapserver/ldap/servers/plugins/pam_passthru/README?root=dirsec&rev=1.5&view=auto
config.ldif - 
http://cvs.fedora.redhat.com/viewcvs/ldapserver/ldap/servers/plugins/pam_passthru/config.ldif?root=dirsec&rev=1.5&view=auto

-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/x-pkcs7-signature
Size: 3178 bytes
Desc: S/MIME Cryptographic Signature
URL: <http://listman.redhat.com/archives/fedora-directory-users/attachments/20061121/cbc6f6ce/attachment.bin>


More information about the Fedora-directory-users mailing list