Hi,
with this patch the LDAP backend can store two additional attributes to
the sysdb if available. The original DN is used by the authentication
part of the LDAP backend to bind to the LDAP server. The user principle
name (UPN) can be used by the kerberos backend to get the TGT. Both are
necessary if the DN or UPN cannot be generated from the unix user name,
which is often the case if you are using AD.
bye,
Sumit
Show replies by date