Re: Kerberos authenticatino and ldap authorization
- From: Tillman Hodgson <tillman@xxxxxxxxxxxxxxx>
- Date: Tue, 6 Mar 2007 13:00:34 -0600
On Tue, Mar 06, 2007 at 10:07:57AM -0700, RJ45 wrote:
for example I would like to installa MIT krb5 implementation from ports
instead of using heidmal default this because the kerberos server
on my network is a MIT server and I can't use kadmin on FreeBSD
to administrer the kerberos server remotely using heidmal implementation.
Anyone has experience of MIT krb5 implementation on FreeBSD ?
The handbook has a chapter on setting up Kerberos, albeit focused on Heimdal.
http://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/kerberos5.html
In section 14.8.6 it notes that the kadmin protocol differs between
Kerberos implementations -- you have to use the MIT kadmin to administer
a remote MIT KDC.
Other than the kadmin bits (which are fairly different between the two
but isn't used by end-users anyway), it's pretty much transparent to a
Kerberos-enabled workstation which implementation it's using. I
typically install both (to different paths to avoid file conflicts)
because I like using the newest Heimdal rather than the one in base and
also because the included client applications differ. For example, MIT
has Kerberos rsh whereas the base Heimdal doesn't for some of the
platforms that I use.
If you run into any specific issues when setting it up, please post back
to the list and cc me and I'll give you a hand.
-T
--
"I once bought a cellphone that had a little sticker on the box that said
'DO NOT EAT PACKAGING MATERIAL'. There went another freebie snack at the
office."
- A.S.R. quote (Andreas "Buzh" Skau)
_______________________________________________
freebsd-questions@xxxxxxxxxxx mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscribe@xxxxxxxxxxx"
- Follow-Ups:
- References:
- Prev by Date: upgraded 6.2 and mysql lost all privileges
- Next by Date: Re: upgraded 6.2 and mysql lost all privileges
- Previous by thread: RE: Kerberos authenticatino and ldap authorization
- Next by thread: Re: Kerberos authenticatino and ldap authorization
- Index(es):
Relevant Pages
|
