|
 OpenLDAP Faq-O-Matic : OpenLDAP Software FAQ : Integration :
 How can OpenLDAP, Cyrus-SASL, OpenSSL and KerberosV be combined? |
OpenLDAP and Cyrus SASL versions:
OpenLDAP 2.1 and later only supports Cyrus SASL 2.1 and later.
|
MIT Kerberos V libraries are not thread-safe. Use Heimdal Kerberos or build OpenLDAP --without-threads.
|
OpenLDAP supports Kerberos authentication via the SASL/GSSAPI authentication mechanism. That is, you just need to build Cyrus SASL with GSSAPI support, (using Heimdal Kerberos V libraries) and then build OpenLDAP with Cyrus SASL support.
If you're trying to use Kerberos for Simple Binds, see the link below about the {KERBEROS} password scheme.
|
See also:
 How does one use LDAP authentication with PAM?
How does one integrate LDAP with name services using NSS?
How do I use TLS/SSL?
Is there an alternative to {KERBEROS} passwords in current versions of slapd(8)?
|
See also:
Is there an alternative to {KERBEROS} passwords in current versions of slapd(8)?
|
| [Append to This Answer] |
hyc@openldap.org, Kurt@OpenLDAP.org, danpritts@yahoo.com
|