-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
On 11/19/2010 06:39 AM, Stephen Gallagher wrote:
On 11/19/2010 04:44 AM, Sumit Bose wrote:
> Hi,
> I've found a misleading statement in the man page, this patch should
> fix it.
Nack. GSSAPI does not guarantee that Kerberos is available for user
logins. It's strongly indicative, but it WOULD be possible for an
environment to be set up to use GSSAPI instead of certificates for
maintaining client->LDAP connectivity, without using Kerberos for auth.
Yes, it would make more SENSE to use Kerberos for auth in this
situation, but it's not mandatory.
Also, I was under the impression that we DID support authentication over
GSSAPI. If that's not true, please file an enhancement bug.
After discussion with Sumit on IRC, I withdraw my nack. This is
something we can add later if we actually get a request for it.
Ack to the manpage change.
- --
Stephen Gallagher
RHCE 804006346421761
Delivering value year after year.
Red Hat ranks #1 in value among software vendors.
http://www.redhat.com/promo/vendor/
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)
Comment: Using GnuPG with Fedora -
http://enigmail.mozdev.org/
iEYEARECAAYFAkzmb8IACgkQeiVVYja6o6PoQwCfRMMzeCMbs+WfsEeHRIXpMAPU
5B0AoJ9s4zYZ7kwSdnemXONNj8rvXaAA
=nDY5
-----END PGP SIGNATURE-----