OT: Heimdal snapshots for debian (was: Re: [Samba] LDAP + SASL (kerberos) password syncing)

2005-02-05 Thread Mark Roach
On Fri, 2005-01-21 at 13:58 +1100, Andrew Bartlett wrote: > On Thu, 2005-01-20 at 20:58 -0500, Mark Roach wrote: > > > You could also use the smbk5pwd OpenLDAP module, which will fill out the > > > other Kerberos encryption types at the same time. (I'm not yet running > > > this). I think this m

Re: [Samba] LDAP + SASL (kerberos) password syncing

2005-01-20 Thread Andrew Bartlett
On Thu, 2005-01-20 at 20:58 -0500, Mark Roach wrote: > Hi, Andrew. > > On Fri, 2005-01-21 at 09:16 +1100, Andrew Bartlett wrote: > > Samba don't have the plaintext password, so can't do things via PAM that > > require the original plaintext. At my site, I have Heimdal Kerberos > > backed onto the

Re: [Samba] LDAP + SASL (kerberos) password syncing

2005-01-20 Thread Mark Roach
Hi, Andrew. On Fri, 2005-01-21 at 09:16 +1100, Andrew Bartlett wrote: > Samba don't have the plaintext password, so can't do things via PAM that > require the original plaintext. At my site, I have Heimdal Kerberos > backed onto the same LDAP directory as Samba, so they share the > passwords for

Re: [Samba] LDAP + SASL (kerberos) password syncing

2005-01-20 Thread Andrew Bartlett
On Wed, 2005-01-19 at 20:16 -0500, Mark Roach wrote: > I am getting a bit confused about which methods to use to keep my > passwords synced given the following scenario. > > Samba PDC using LDAP backend. > LDAP uses [EMAIL PROTECTED] type passwords > Sasl mechanism is saslauthd using kerberos5 >

[Samba] LDAP + SASL (kerberos) password syncing

2005-01-20 Thread Mark Roach
I am getting a bit confused about which methods to use to keep my passwords synced given the following scenario. Samba PDC using LDAP backend. LDAP uses [EMAIL PROTECTED] type passwords Sasl mechanism is saslauthd using kerberos5 I can use pam like: password required pam_smbpass.so password r