Re: Open LDAP VS Kerberos : help needed

2008-05-22 Thread Brian Thompson
Ken Raeburn wrote: >On May 22, 2008, at 07:18, Anshuman Hazarika wrote: > > >>I now know that we can make kerberos use openldap as its data store >>backend, but only with heimdal as our kdc, not mit kerberos. >> >> > >Why do you think MIT Kerberos can't do that? > >Our current release ha

Re: Open LDAP VS Kerberos : help needed

2008-05-22 Thread Ken Raeburn
On May 22, 2008, at 07:18, Anshuman Hazarika wrote: > I now know that we can make kerberos use openldap as its data store > backend, but only with heimdal as our kdc, not mit kerberos. Why do you think MIT Kerberos can't do that? Our current release has LDAP database support. I'm not really an

Open LDAP VS Kerberos : help needed

2008-05-22 Thread Anshuman Hazarika
Hi, I now know that we can make kerberos use openldap as its data store backend, but only with heimdal as our kdc, not mit kerberos. I have read somewhere that with openldap you can add krb5Principal object class and krb5principalName attribute to your users to allow them to use credentials th