[24588] in Kerberos
Re: is that common to use kerberos authentication for SUN iplanet
daemon@ATHENA.MIT.EDU (Markus Moeller)
Thu Sep 1 19:51:14 2005
To: kerberos@mit.edu
From: "Markus Moeller" <huaraz@moeller.plus.com>
Date: Fri, 2 Sep 2005 00:46:38 +0100
Message-ID: <df83pc$598$1@sea.gmane.org>
X-Complaints-To: usenet@sea.gmane.org
Errors-To: kerberos-bounces@mit.edu
To point 2) I would do the password change through Kerberos kpasswd or if
you need to do it as an admin I think there is also a function in the MIT
library to do so.
Regards
Markus
"Craig Huckabee" <huck@spawar.navy.mil> wrote in message
news:43175FA9.9090008@spawar.navy.mil...
> Markus,
>
> Two reasons:
>
> 1) We are working towards turning off non-SSL access to our Sun LDAP
> servers.
>
> 2) We ran into problems when talking to AD using Perl-LDAP/SASL without
> SSL. IIRC, we couldn't do a password change over a non-SSL port - AD spit
> back an error. Doing everything over SSL cleared up the problems.
>
> But, yes, in most cases we could just use one or the other.
>
> --Craig
>
>
> Markus Moeller wrote:
>
>> Craig,
>>
>> you say you use SASL + SSL. As far as I know SASL/GSSAPI can do
>> encryption too. What was the reason not to use SASL/GSSAPI with
>> encryption. And example is AD, which can be accessed via SASL/GSSAPI with
>> encryption.
>>
>> Thanks
>> Markus
>>
>> "Craig Huckabee" <huck@spawar.navy.mil> wrote in message
>> news:4316DEC8.5060809@spawar.navy.mil...
>>
>>>Kent Wu wrote:
>>>
>>>> So my question is that is it pretty easy to enable Kerberos for SUN
>>>> LDAP after installing SEAM? Or can SUN LDAP use other KDC as well?
>>>
>>> We use Sun's LDAP server with PADL's GSSAPI plugin - we built our copy
>>> against MIT Kerberos 1.3.x and use MIT KDCs. I think the binary
>>> versions they sold previously also use MIT Kerberos.
>>>
>>> We now have several processes that regularly use only GSSAPI/SASL over
>>> SSL to authenticate and communicate with LDAP. Works very well.
>>>
>>>HTH,
>>>Craig
>>>
>>>________________________________________________
>>>Kerberos mailing list Kerberos@mit.edu
>>>https://mailman.mit.edu/mailman/listinfo/kerberos
>>>
>>
>>
>>
>>
>> ________________________________________________
>> Kerberos mailing list Kerberos@mit.edu
>> https://mailman.mit.edu/mailman/listinfo/kerberos
>
>
> ________________________________________________
> Kerberos mailing list Kerberos@mit.edu
> https://mailman.mit.edu/mailman/listinfo/kerberos
>
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
