Re: openldap and kerberos integration

2010-12-16 Thread Hugo Monteiro
On 12/15/2010 11:47 PM, Howard Chu wrote: Hugo Monteiro wrote: On 12/15/2010 07:19 PM, Howard Chu wrote: Thierry Lacoste wrote: I noticed some differences. In particular ldappasswd updates sambaLMPassword while kpasswd does not. I suppose we can delete sambaLMPassword support by now,

Re: openldap and kerberos integration

2010-12-15 Thread Howard Chu
Thierry Lacoste wrote: On 10 déc. 10, at 20:57, Howard Chu wrote: Thierry Lacoste wrote: BTW I'd appreciate any recommandations about providing kerberos and LDAP authentication (with the same password) in a production setting. Should I use Heimdal or MIT kerberos ? If Heimdal, is it better

Re: openldap and kerberos integration

2010-12-15 Thread Hugo Monteiro
On 12/15/2010 07:19 PM, Howard Chu wrote: Thierry Lacoste wrote: On 10 déc. 10, at 20:57, Howard Chu wrote: Thierry Lacoste wrote: BTW I'd appreciate any recommandations about providing kerberos and LDAP authentication (with the same password) in a production setting. Should I use Heimdal

Re: openldap and kerberos integration

2010-12-15 Thread Howard Chu
Hugo Monteiro wrote: On 12/15/2010 07:19 PM, Howard Chu wrote: Thierry Lacoste wrote: I noticed some differences. In particular ldappasswd updates sambaLMPassword while kpasswd does not. I suppose we can delete sambaLMPassword support by now, certainly no one should be using it any more.

Re: openldap and kerberos integration

2010-12-10 Thread Thierry Lacoste
On 9 déc. 10, at 22:03, Howard Chu wrote: Thierry Lacoste wrote: Hello, I'm experimenting with integrating Kerberos and OpenLDAP following roughly http://wiki.mandriva.com/en/Projects/OpenLDAP_DIT I'm using CentOS and Buchan Milne's repository (http://staff.telkomsa.net/packages/rhel5/ )

Re: openldap and kerberos integration

2010-12-10 Thread Howard Chu
Thierry Lacoste wrote: On 9 déc. 10, at 22:03, Howard Chu wrote: Thierry Lacoste wrote: Hello, I'm experimenting with integrating Kerberos and OpenLDAP following roughly http://wiki.mandriva.com/en/Projects/OpenLDAP_DIT I'm using CentOS and Buchan Milne's repository

Re: openldap and kerberos integration

2010-12-10 Thread Thierry Lacoste
BTW I'd appreciate any recommandations about providing kerberos and LDAP authentication (with the same password) in a production setting. Should I use Heimdal or MIT kerberos ? If Heimdal, is it better to use OpenLDAP as a backend for Kerberos or let Kerberos use its native backend? If

openldap and kerberos integration

2010-12-09 Thread Thierry Lacoste
Hello, I'm experimenting with integrating Kerberos and OpenLDAP following roughly http://wiki.mandriva.com/en/Projects/OpenLDAP_DIT I'm using CentOS and Buchan Milne's repository (http://staff.telkomsa.net/packages/rhel5/ ) both for OpenLDAP and Heimdal. I've almost succeeded except for

Re: openldap and kerberos integration

2010-12-09 Thread Howard Chu
Thierry Lacoste wrote: Hello, I'm experimenting with integrating Kerberos and OpenLDAP following roughly http://wiki.mandriva.com/en/Projects/OpenLDAP_DIT I'm using CentOS and Buchan Milne's repository (http://staff.telkomsa.net/packages/rhel5/ ) both for OpenLDAP and Heimdal. I've almost