[SSSD] [PATCH] Fix man page

Stephen Gallagher sgallagh at redhat.com
Fri Nov 19 11:39:40 UTC 2010


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 11/19/2010 04:44 AM, Sumit Bose wrote:
> Hi,
> 
> I've found a misleading statement in the man page, this patch should
> fix it.
> 

Nack. GSSAPI does not guarantee that Kerberos is available for user
logins. It's strongly indicative, but it WOULD be possible for an
environment to be set up to use GSSAPI instead of certificates for
maintaining client->LDAP connectivity, without using Kerberos for auth.

Yes, it would make more SENSE to use Kerberos for auth in this
situation, but it's not mandatory.

Also, I was under the impression that we DID support authentication over
GSSAPI. If that's not true, please file an enhancement bug.

- -- 
Stephen Gallagher
RHCE 804006346421761

Delivering value year after year.
Red Hat ranks #1 in value among software vendors.
http://www.redhat.com/promo/vendor/
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)
Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org/

iEYEARECAAYFAkzmYfwACgkQeiVVYja6o6PshQCgqQN+Dn+E6rdFrAnLNwwamqXV
QJEAn0+0ATcktRrSLJgj+XNNoKyU3J7w
=1dNJ
-----END PGP SIGNATURE-----



More information about the sssd-devel mailing list