>Fedora DS does not support the {KERBEROS}user@REALM method in the
>userPassword attribute. That is an OpenLDAP only feature, AFAIK.
Ah, well that makes my life easy!
>> Another more general question. As I want to use the passthrough module
strictly to do the the Kerberos logins, I assume the
''ldapserver'' pam file would only need pam_krb5.so and not, for
example, pam_unix.so. Is that right?
>>
>I think so, but I''m not sure. You''ll have to ask a PAM
guru for that.
If anyone has pointers, please let me know. Thanks!
Marty