[24575] in Kerberos
RE: is that common to use kerberos authentication for SUN
daemon@ATHENA.MIT.EDU (Wachdorf, Daniel R)
Thu Sep 1 14:08:27 2005
Content-class: urn:content-classes:message
MIME-Version: 1.0
Date: Thu, 1 Sep 2005 09:38:19 -0600
Message-ID: <80A84CB5E834D4439556D1F64A1FEB83012AA90A@ES20SNLNT.srn.sandia.gov>
From: "Wachdorf, Daniel R" <drwachd@sandia.gov>
To: "Kent Wu" <kwu@xsigo.com>, kerberos@mit.edu
Content-Type: text/plain;
charset=us-ascii
Content-Transfer-Encoding: 8bit
Errors-To: kerberos-bounces@mit.edu
You can use Sun's Directory server with non Sun kdc, you just have to
have SEAM (Sun's Kerberos) setup on the director server (ie - it needs
the client libs). If you have an install on Solaris 9 or 10 I don't
even then you need to install anything - the Kerberos libs are already
there. (You will have to run the directory server on a Solaris box).
See http://docs.sun.com/source/817-7613/ssl.html
-dan
-----Original Message-----
From: kerberos-bounces@mit.edu [mailto:kerberos-bounces@mit.edu] On
Behalf Of Kent Wu
Sent: Wednesday, August 31, 2005 3:29 PM
To: kerberos@mit.edu
Subject: is that common to use kerberos authentication for SUN iplanet
LDAP server?
Hi guys,
Does anyone have experience on this to share?
I've set up a SUN LDAP server and it's running fine by
using simple authentication so far. Of course I want to
make it more secure (to protect the password while binding
to LDAP server) so I'm thinking either MD5-Digest or Kerberos.
However looks like SUN LDAP itself doesn't have kerberos
abilities and I have to install SEAM (Sun Enterprise Authentication
Mechanism) separately to enable Kerberos.....
So I was thinking that if I can easily configure SUN LDAP to
use MD5-digest then that should be the easiest however it seems
that I have to store the password as plain-text in LDAP
server to enable MD5-digest and I don't want to do that (Let
me know if there are other easier ways to enable MD5-digest).
So my question is that is it pretty easy to enable Kerberos
for SUN LDAP after installing SEAM? Or can SUN LDAP use other
KDC as well?
Thanks a lot in advance !
P.S, I know LDAPS (LDAP over SSL) can easily achieve my goal
however I kinda think it's an overkill since I don't really
need to protect all the LDAP transactions except for the
password part...
-Kent
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
