[29940] in Kerberos
Re: Kerberos Ldap Integration
daemon@ATHENA.MIT.EDU (Rodrigo Castro)
Tue Jun 10 07:37:16 2008
Message-ID: <a99e3f890806100435p24f5b22di7ae08e979e3fe116@mail.gmail.com>
Date: Tue, 10 Jun 2008 08:35:46 -0300
From: "Rodrigo Castro" <rdccosmo@gmail.com>
To: "gaurav bagga" <gaurav.v.bagga@gmail.com>
In-Reply-To: <6052ead90805290637l4614e2f4wdb4098997c855b27@mail.gmail.com>
MIME-Version: 1.0
Content-Disposition: inline
Cc: kerberos@mit.edu, Turbo Fredriksson <turbo@bayour.com>
Content-Type: text/plain; charset="iso-8859-1"
Errors-To: kerberos-bounces@mit.edu
Content-Transfer-Encoding: 8bit
Hi, I don't know if this is the right place to ask, but I've been striving
to prevent local root su ldapuser, although failed so far. I've already
configured kerberos to work with ldap following this page
http://www.bayour.com/LDAPv3-HOWTO.html
Any help is appreciated.
On Thu, May 29, 2008 at 10:37 AM, gaurav bagga <gaurav.v.bagga@gmail.com>
wrote:
> Hi Turbo,
>
> Thanks for the link...
> I am able to link ldap and kerberos, I can add principals from kadmin and
> they get added in ldap.
>
> But one problem still remains.
> I want to mix in Kerberos principal attributes to a directory entry of the
> people objectclass which has usserPassword. I want this password to be used
> by kdc.
>
> Is such a thing possible? I went through the schema and found that
> 'krbUPEnabled' helps in achieving this but how can one set this attribute.
>
> I am fairly new to this kerberos and ldap stuff so excuse me if I ask
> something thats silly.
>
> If someone has to automate the process of adding principals what are the
> possible solutions?
> Using scripts? Is that a good way ?
>
> Thanks and Regards,
> Gaurav
>
> On Thu, May 29, 2008 at 1:45 AM, Turbo Fredriksson <turbo@bayour.com>
> wrote:
>
> > >>>>> "gaurav" == gaurav bagga <gaurav.v.bagga@gmail.com> writes:
> >
> > gaurav> Hi all, I am trying to integrate Kerberos and Ldap but not
> > gaurav> happy with what I have achieved till now.I'll really
> > gaurav> appreciate if any one can help/guide by giving pointers
> > gaurav> towards *good articles *which give information regarding
> > gaurav> the steps to be performed in doing the same.
> >
> > Have a look at http://bayour.com/LDAPv3-HOWTO.html
> >
> ________________________________________________
> Kerberos mailing list Kerberos@mit.edu
> https://mailman.mit.edu/mailman/listinfo/kerberos
>
--
__________________________________
Rodrigo de Castro Cosme
Ciência da Computação - Universidade Federal do Espírito Santo
Suporte mailing list - suporte@inf.ufes.br
MSN - rdccosmo@gmail.com
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
