[37248] in Kerberos
RE: syncing MIT Kerberos to Active Directory
daemon@ATHENA.MIT.EDU (Tony Pugielli)
Mon Oct 5 22:25:19 2015
From: Tony Pugielli <tpugielli@tti-wireless.com>
To: Russ Allbery <eagle@eyrie.org>
Date: Tue, 6 Oct 2015 02:23:23 +0000
Message-ID: <bfcbc9c9e5fa4e869aae9d3f50b5bd8a@WEBMAIL.tti-wireless.com>
In-Reply-To: <87mvvx3vvi.fsf@hope.eyrie.org>
Content-Language: en-US
MIME-Version: 1.0
Cc: "kerberos@mit.edu" <kerberos@mit.edu>
Content-Type: text/plain; charset="iso-8859-1"
Errors-To: kerberos-bounces@mit.edu
Content-Transfer-Encoding: 8bit
Excellent, Thank You for the response.
--
For service related issues, please call 732-553-9100 option 2, option 2 to speak with our TAC engineers. Email is not monitored for service requests.
--
Tony Pugielli
Manager of Systems Engineers
Turn-key Technologies, Inc. (TTI Wireless)
2400 Main St. Ext. Suite 12 Sayreville, NJ 08872
(W) 732-553-9100 ext. 123
(M) 732-320-0711
(F) 732-553-9107
www.turn-keytechnologies.com
www.ttiguardian.com
-----Original Message-----
From: Russ Allbery [mailto:eagle@eyrie.org]
Sent: Monday, October 5, 2015 4:26 PM
To: Tony Pugielli <tpugielli@tti-wireless.com>
Cc: kerberos@mit.edu
Subject: Re: syncing MIT Kerberos to Active Directory
Tony Pugielli <tpugielli@tti-wireless.com> writes:
> Good day, I have an environment with MIT Kerberos and Active
> Directory. Is there a way to keep both databases (username and
> password) in sync? The use case is 802.1x authentication. EAP-GTC is
> not native to many devices so we want to use Active Directory so we
> can take advantage of the more widely native supplicant PEAP-MSCHAPV2.
> We would prefer the user only need to keep track of one username and
> password. Right now the Kerberos MIT database is widely used for their
> single sign-on applications.
You may find:
http://www.eyrie.org/~eagle/software/krb5-sync
useful, although it only does passwords. I believe there is a krb5-adsync package somewhere based on that which also creates accounts.
--
Russ Allbery (eagle@eyrie.org) <http://www.eyrie.org/~eagle/>
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
