[24581] in Kerberos
Re: is that common to use kerberos authentication for SUN iplanet
daemon@ATHENA.MIT.EDU (Craig Huckabee)
Thu Sep 1 16:11:00 2005
Message-ID: <43175FA9.9090008@spawar.navy.mil>
Date: Thu, 01 Sep 2005 16:08:09 -0400
From: Craig Huckabee <huck@spawar.navy.mil>
MIME-Version: 1.0
To: Markus Moeller <huaraz@moeller.plus.com>
In-Reply-To: <df7kde$p4h$1@sea.gmane.org>
Content-Type: text/plain; charset=us-ascii; format=flowed
Content-Transfer-Encoding: 7bit
cc: kerberos@mit.edu
Errors-To: kerberos-bounces@mit.edu
Markus,
Two reasons:
1) We are working towards turning off non-SSL access to our Sun LDAP
servers.
2) We ran into problems when talking to AD using Perl-LDAP/SASL
without SSL. IIRC, we couldn't do a password change over a non-SSL port
- AD spit back an error. Doing everything over SSL cleared up the problems.
But, yes, in most cases we could just use one or the other.
--Craig
Markus Moeller wrote:
> Craig,
>
> you say you use SASL + SSL. As far as I know SASL/GSSAPI can do encryption
> too. What was the reason not to use SASL/GSSAPI with encryption. And example
> is AD, which can be accessed via SASL/GSSAPI with encryption.
>
> Thanks
> Markus
>
> "Craig Huckabee" <huck@spawar.navy.mil> wrote in message
> news:4316DEC8.5060809@spawar.navy.mil...
>
>>Kent Wu wrote:
>>
>>> So my question is that is it pretty easy to enable Kerberos for SUN
>>>LDAP after installing SEAM? Or can SUN LDAP use other KDC as well?
>>
>> We use Sun's LDAP server with PADL's GSSAPI plugin - we built our copy
>>against MIT Kerberos 1.3.x and use MIT KDCs. I think the binary versions
>>they sold previously also use MIT Kerberos.
>>
>> We now have several processes that regularly use only GSSAPI/SASL over
>>SSL to authenticate and communicate with LDAP. Works very well.
>>
>>HTH,
>>Craig
>>
>>________________________________________________
>>Kerberos mailing list Kerberos@mit.edu
>>https://mailman.mit.edu/mailman/listinfo/kerberos
>>
>
>
>
>
> ________________________________________________
> Kerberos mailing list Kerberos@mit.edu
> https://mailman.mit.edu/mailman/listinfo/kerberos
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
