[Freeipa-devel] [PATCH] Retrieve keytabs via LDAP

Simo Sorce ssorce at redhat.com
Tue Dec 18 22:28:23 UTC 2007


On Wed, 2007-12-19 at 08:57 +1100, Andrew Bartlett wrote:
> On Tue, 2007-12-18 at 11:13 -0500, Simo Sorce wrote:
> > This patch adds a new extended operation (uses the RH-IPA OID space) to
> > retrieve keytabs directly from LDAP, simplifying management of keytabs.
> > 
> > There are still some rough edges but it basically works and can generate
> > a new keytab on request.
> > 
> > Provided also an example program to test it, unfortunately python-ldap
> > does not wrap the extended operations calls so C is the only way for
> > now.
> 
> This could be a useful thing to add to Samba4's LDAP server at some
> point...

Actually I am rewriting this and changing approach, more details later
(may still be useful for samba4, new approach will also make it easier
to adapt prolly as it offloads some unnecessary work from the server),
stay tuned.

Simo.

-- 
| Simo S Sorce |
| Sr.Soft.Eng. |
| Red Hat, Inc |
| New York, NY |




More information about the Freeipa-devel mailing list