mirror of
https://git.openldap.org/openldap/openldap.git
synced 2024-12-15 03:01:09 +08:00
6437785a82
simple bind via:
{KERBEROS}principal
Code is disabled by default (for security reasons). Use
--enable-kpasswd to enable. Behind SLAPD_KPASSWD.
Reworked Kerberos detection and split out KBIND as independent
feature (--disable-kbind) (LDAP_API_FEATURE_X_OPENLDAP_V2_KBIND).
KBIND depends upon detection of KRB4 (or KRB425) support. Detection,
building with eBones (as distributed with FreeBSD 3.4) okay, but
wasn't able to test as I don't have a K4 KDC handy.
--with-kerberos has a number of detection options... most likely
don't work properly.
|
||
|---|---|---|
| .. | ||
| auth.c | ||
| edit.c | ||
| etc.ud.conf | ||
| find.c | ||
| globals.c | ||
| group.c | ||
| help.c | ||
| main.c | ||
| Makefile.in | ||
| mod.c | ||
| print.c | ||
| README | ||
| string_to_key.c | ||
| ud.dsp | ||
| ud.dsw | ||
| ud.h | ||
| util.c | ||
Users ----- For users, see the man page on ud. Installers ---------- For installers, see the header file. Anything that is configurable is listed in there as a #define, and the file is pretty well commented. Kerberos users -------------- If you're going to use Kerberos, be sure that you have a Kerberos config file in /etc/krb.conf of the form: <realm> <realm> <server-for-realm> [ admin server ] This should be the realm in which users are going to authenticate, which is not necessarily your realm. You can certainly have other entries in this file, but you'll need at least these two. Also be sure that you have the necessary entries in /etc/services so that your client knows on which port to find a Kerberos authentication server. An pair of entries like this: kerberos 750/udp kdc # Kerberos authentication kerberos 750/tcp kdc # Kerberos authentication is fairly typical.