search for: gss_api

...(the user is authenticated using pam and thus through winbind (unless NOPASSWD is defined)) - The standard answer is: use a proxy user. But I don?t like it - How does winbind authenticate to the LDAP server ? Would it be possible to do the same with nss_ldap ? - Somebody suggested to use SASL -> GSS_API -> Kerberos. But how do I handle non-AD users, or the NOPASSWD case ? Sincerely Bernhard -- Minds are like parachutes They only function when open