Andrey Ivanov wrote:
I was wondering if anyone tried a configuration with Kerberos using
LDAP as database. After some searching it seems that MIT kerberos is
not capable to do that.
Newer versions of MIT are better at this - they have more support for
However, Heimdal has a special option for
that. The only problem is that this option is applicable only to
openldap and only to unix socket connections. At least that's what is
told in the doc and in numerous howtos.
That is correct. I suppose Heimdal could be hacked to use a regular tcp
socket instead of the ldapi interface.
There is also a special schema
extension for storing these data in openLDAP. I haven't found these
objects (krb* or kerberos*) in FDS schema....
It's not included with Fedora DS, but you could easily convert it and
Can anyone tell anything about a possibility of using Kerberos with
the key/principals database stored in Fedora Directory Server, please?
Direction des Systemes d'Information
91128 Palaiseau CEDEX
Fedora-directory-users mailing list