search for: krbldap

...g. I would start by testing IPA. Redhat is building out a set of enterprise management tools which include cobbler and spacewalk; I would think IPA will eventually be integrated into their mgt tools. That said, if you want to use Ldap + Kerberos, here are two good howtos: http://aput.net/~jheiss/krbldap/howto.html http://www-theorie.physik.unizh.ch/~dpotter/howto/kerberos The "current" centos rpms for Ldap are quite old; you should consider rebuilding the latest fedora rpms for your system. -- Steve Glasser sgla9347 at gmail.com

Does this mean that my samba is ready to connect to LDAP server? root at webdev # ./smbd -b |grep LDAP HAVE_LDAP_H HAVE_LDAP HAVE_LDAP_ADD_RESULT_ENTRY HAVE_LDAP_INIT HAVE_LDAP_INITIALIZE HAVE_LDAP_SET_REBIND_PROC HAVE_LIBLDAP LDAP_SET_REBIND_PROC_ARGS root at webdev # Thanks! Paras.

...hould give you an idea of whether the client is even reaching the server, and if so what sort of error is occurring. Btw you didn't mention if you were doing Ldap over tls, but that adds another point of failure. See here for a step-by-step test procedure for ssl/tls: http://aput.net/~jheiss/krbldap/howto.html Cheers, -- Steve Glasser sgla9347 at gmail.com

...a response. At the moment, I have Linux and Solaris servers happily authenticating to my MIT Kerberos KDC, and fetching user information via an OpenLDAP server with a StartTLS connection (and authenticating to the LDAP server via their Kerberos ticket - very neat stuff, and http://aput.net/~jheiss/krbldap/ was very helpful in setting it all up, albeit with a few errors and omissions). Samba is also using the same LDAP directory to store its SAM database, including user passwords, which can thus obviously differ from their Kerberos passwords. All the Linux and UNIX systems authenticate via Kerberos...

I was told recently that Kerberos authentication won't work against a non-windows KDC. Is that accurate? So for instance, it is not possible for Samba running on say RHEL, to authenticate against a Linux server running MIT Kerberos? Additionally, many people said that setting this up was well-documented. Any suggestions of particularly good docs / how-to's?' And lastly, is