[22694] in Kerberos
Re: Kerberos & LDAP
daemon@ATHENA.MIT.EDU (Rachel Elizabeth Dillon)
Tue Oct 19 19:38:42 2004
Date: Tue, 19 Oct 2004 19:12:57 -0400
From: Rachel Elizabeth Dillon <red@mit.edu>
To: "Cindi Howson, ASK" <cindihowson@askcindi.com>
Message-ID: <20041019231257.GP284@yiff.mit.edu>
Mime-Version: 1.0
In-Reply-To: <PCECLKCLEFLNOEJKJBIECEBAFGAA.cindihowson@askcindi.com>
cc: kerberos@mit.edu
Content-Type: multipart/mixed; boundary="===============30355947509934156=="
Errors-To: kerberos-bounces@mit.edu
--===============30355947509934156==
Content-Type: multipart/signed; micalg=pgp-sha1;
protocol="application/pgp-signature"; boundary="DXIF1lRUlMsbZ3S1"
Content-Disposition: inline
--DXIF1lRUlMsbZ3S1
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable
Kerberos and LDAP are very very different things. If they were animals,
one would be a dog and one would be something very different, like maybe
a lemur. Basically, Kerberos is an authentication service which uses
strong encryption to guarantee the authentication of users and hosts.
LDAP, on the other hand, is a database protocol that is often used to=20
store hierarchical directory information.
For the most part they have different purposes, though sometimes they=20
can be used in concert to have an authenticated and encrypted database
of directory information. You can sort of use LDAP for authentication,
though it is much like teaching a lemur to fetch (really strange and
awkward). You cannot use Kerberos as a directory database; dogs do not
climb trees.
To learn more about Kerberos, try the excellent Kerberos FAQ at:
http://www.cmf.nrl.navy.mil/CCS/people/kenh/kerberos-faq.html
To learn more about LDAP, try this LDAP FAQ (one of many) at:
http://www.openldap.org/faq/data/cache/3.html
Best of luck.=20
-r.=20
On Tue, Oct 19, 2004 at 09:32:18AM -0400, Cindi Howson, ASK wrote:
> Can you point me to any resources that explain how Kerberos is different /
> similar to LDAP?
>=20
> Thanks,
>=20
>=20
> Cindi Howson
> Analytic Solutions Know-How (ASK)
> Howson, Myers, Holumn (HMH)
> www.askcindi.com, www.biscorecard.com
> 973-726-3754
>=20
>=20
> ________________________________________________
> Kerberos mailing list Kerberos@mit.edu
> https://mailman.mit.edu/mailman/listinfo/kerberos
--DXIF1lRUlMsbZ3S1
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: Digital signature
Content-Disposition: inline
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.4 (GNU/Linux)
iD8DBQFBdZ95rAG/UVUP/b0RAvxGAJ0euKiNJELjCP+ARFdksDuHS6tQcQCff/Jh
5sshzOwGsmDLuBgfF9UD4SY=
=urTe
-----END PGP SIGNATURE-----
--DXIF1lRUlMsbZ3S1--
--===============30355947509934156==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
--===============30355947509934156==--
