[SSSD] sssd and kerberos.

Timo Aaltonen timo.aaltonen at aalto.fi
Wed Aug 4 14:18:50 UTC 2010


On Mon, 2 Aug 2010, Patrik Martinsson wrote:

> ldap_tls_reqcert = demand
> ldap_tls_cacert = /etc/openldap/cacerts/CADOUBLE.cer
> ldap_tls_cacertdir = /etc/openldap/cacerts

I guess this doesn't work with GSSAPI SASL binding yet? Tried to force the 
authid to FOO$@REALM, but it fails just the same.

it's harder to automatically generate certificates for the clients, that's 
why I'm interested in getting this working :)


-- 
Timo Aaltonen
Systems Specialist, Aalto IT



More information about the sssd-devel mailing list