[SSSD] sssd and kerberos.
Timo Aaltonen
timo.aaltonen at aalto.fi
Wed Aug 4 14:18:50 UTC 2010
On Mon, 2 Aug 2010, Patrik Martinsson wrote:
> ldap_tls_reqcert = demand
> ldap_tls_cacert = /etc/openldap/cacerts/CADOUBLE.cer
> ldap_tls_cacertdir = /etc/openldap/cacerts
I guess this doesn't work with GSSAPI SASL binding yet? Tried to force the
authid to FOO$@REALM, but it fails just the same.
it's harder to automatically generate certificates for the clients, that's
why I'm interested in getting this working :)
--
Timo Aaltonen
Systems Specialist, Aalto IT
More information about the sssd-devel
mailing list