2
votes
1answer
39 views

OpenLDAP+Kerberos authentication – id (NSS) works, but authentication says user is unknown

I have a central authentication server with OpenLDAP set up and populated, and Kerberos 5, also populated. On an Ubuntu LTS machine, I set up nslcd and kerberos client stuff. This way, issuing the ...
0
votes
1answer
35 views

DNS Portability with regards to LDAP/Kerberos

How portable is a DNS server when it comes to LDAP, especially Kerberos which I am using for authentication? Meaning, how much do I have to change to use the same LDAP server with 2 different DNS ...
0
votes
0answers
30 views

Import accounts from Kerberos/OpenLDAP to linux

I have a configuration of our own Kerberos server and OpenLDAP server that manages user accounts. I want to get rid of Kerberos and LDAP altogether and import a list of users as well as their shadow ...
1
vote
2answers
114 views

Managing user and their credentials in kerberos and openldap system

I am learning to use openldap as backend database for kerberos credentials. It is good that all the programs are working with single sign on. The problem is - I can manage user from kadmin command ...
1
vote
1answer
339 views

Bind DN entry missing in stash file - while initializing database for realm

I'm trying to run kerberos with ldap back-end on Centos 6.3 After creating Realm with: kdb5_ldap_util -D "cn=admin,dc=example,dc=com" create -sscope sub -sf ...
1
vote
0answers
463 views

heimdal kerberos in openldap issue

I think I posted this on the wrong 'sister site', so here it is. I'm having a bit of trouble getting Kerberos (Heimdal version) to work nicely with OpenLDAP. The kerberos database is being stored in ...
2
votes
0answers
235 views

issue with heimdal kerberos in ldap backend

I'm having a bit of trouble getting Kerberos (Heimdal version) to work nicely with OpenLDAP. The kerberos database is being stored in LDAP itself. The KDC uses SASL EXTERNAL authentication as root to ...
0
votes
2answers
405 views

Kerberos with LDAP backend still using db2

I've installed and configured LDAP, installed and configured kerberos to use LDAP as the backend, as follows: [dbdefaults] ldap_kerberos_container_dn = dc=voltage,dc=com [dbmodules] ...
1
vote
1answer
651 views

nagios - Web interface: authentication through kerberos OK, what about authorization on cgi.cfg?

I have successfully installed nagios, and it provides authentication through apache2 which contacts a kerberos authentication server to authenticate users. Now, users are authenticated, but they ...
1
vote
2answers
936 views

Changing user passwords under Kerberos/LDAP

I've set up Kerberos/LDAP on Ubuntu 11.04 Server according to this guide. My client machines are auto-mounting NFS volumes from the server using krb5. All is good: Users can log in to any of the ...
2
votes
1answer
1k views

FreeBSD: OpenLDAP, SASL, and GSSAPI

I've run into some problems getting OpenLDAP on FreeBSD (8.2-STABLE) to authenticate using Kerberos tickets. I hope I've just had a brain glitch, so please feel free to let me know that I've missed ...
2
votes
1answer
151 views

OpenLdap configuration

Simple enough question; is there a way you can configuare your ldap server so it only accepts kerberos authentication and rejects any other type. I'm almost 100% certain this can be done, i just do ...
1
vote
1answer
2k views

OpenLDAP Setup help: SASL/GSSAPI authentication started

I am trying to setup & configure OpenLDAP on Fedora Core 13. I've gotten as far as compiling and installing Openldap v2.4.23. Whenever I try to run one of the LDAP commands (like ldapsearch), ...
3
votes
1answer
3k views

OpenLDAP on Windows and gssapi32

Upon trying to run OpenLDAP on Windows after a non-eventful installation, I get the error that gssapi32.dll is missing. Reinstalling does nothing to alleviate the problem, nor does altering the ...
0
votes
2answers
570 views

Kerberos SSO browser integration?

I'm installing a bunch of web apps for the office, and one of the wants would be Kerberos-managed SSO. Now, I have found some information on the matter, and I wondered, what browsers integrate ...