[SSSD] more terminology questions
Sumit Bose
sbose at redhat.com
Fri Jun 18 07:13:55 UTC 2010
On Fri, Jun 18, 2010 at 02:02:34PM +1000, David O'Brien wrote:
> This time I'm wrestling with "native LDAP" vs any other sort of LDAP,
> and where does MS Active Directory fit in?
>
> afaik "native LDAP" just means LDAP provides the identities and does the
> authentication. If I'm using OpenLDAP or 389 that's easy enough. Switch
> to IPA and Kerberos does the auth (= not native LDAP, right?). What if
> I'm using MS Active Directory? Does that or can that do both? Does it
> provide identities and rely on Kerberos for auth? Should I not be using
> "native LDAP" at all to avoid confusion?
>
> "native" also comes up in the bug report* in relation to Kerberos:
> "Should provide an example of using the proxy identity provider in
> concert with the native Kerberos authentication." What's "native Kerberos"?
>
in gneneral when we are talking about 'native LDAP' or 'native Kerberos'
we mean the LDAP or Kerberos provider of sssd in contrast to using
pam_ldap/nss_ldap or pam_krb5 with the proxy_provider.
HTH
bye,
Sumit
> That's probably enough for now. Remind me why I gave up coffee...?
>
> *https://bugzilla.redhat.com/show_bug.cgi?id=601870
> --
> David
>
>
> "We couldn't care less about comfort. We make you feel good."
> Federico Minoli CEO Ducati Motor S.p.A.
> _______________________________________________
> sssd-devel mailing list
> sssd-devel at lists.fedorahosted.org
> https://fedorahosted.org/mailman/listinfo/sssd-devel
More information about the sssd-devel
mailing list