[SSSD] sssd and kerberos.

Stephen Gallagher sgallagh at redhat.com
Wed Aug 4 14:31:13 UTC 2010


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 08/04/2010 10:18 AM, Timo Aaltonen wrote:
> On Mon, 2 Aug 2010, Patrik Martinsson wrote:
> 
>> ldap_tls_reqcert = demand
>> ldap_tls_cacert = /etc/openldap/cacerts/CADOUBLE.cer
>> ldap_tls_cacertdir = /etc/openldap/cacerts
> 
> I guess this doesn't work with GSSAPI SASL binding yet? Tried to force the 
> authid to FOO$@REALM, but it fails just the same.
> 
> it's harder to automatically generate certificates for the clients, that's 
> why I'm interested in getting this working :)
> 
> 


I'm not sure what you're asking for here.

I think what you're talking about is using:
ldap_sasl_mech = gssapi
ldap_krb5_keytab = /path/to/ldap.keytab

- -- 
Stephen Gallagher
RHCE 804006346421761

Delivering value year after year.
Red Hat ranks #1 in value among software vendors.
http://www.redhat.com/promo/vendor/
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.14 (GNU/Linux)
Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org/

iEYEARECAAYFAkxZebEACgkQeiVVYja6o6PdcgCfVK+oxV1SQX/tcz6RjsaCjIUY
FekAn0GAxKJ8KHdb7gAvvnnmZl2p+vKV
=DYUY
-----END PGP SIGNATURE-----



More information about the sssd-devel mailing list