Benutzer:Philip/Kerberos and LDAP: Unterschied zwischen den Versionen
Philip (Diskussion | Beiträge) KKeine Bearbeitungszusammenfassung |
Whale (Diskussion | Beiträge) |
||
| (Eine dazwischenliegende Version desselben Benutzers wird nicht angezeigt) | |||
| Zeile 112: | Zeile 112: | ||
==FAQ== | ==FAQ== | ||
Please feel free to add questions here. I will answer them within a few days (questions by email have a lesser chance to be answered ;)) | Please feel free to add questions here. I will answer them within a few days (questions by email have a lesser chance to be answered ;)) | ||
HI | |||
I read your howto. it is great but i have a few questions. Im usin debian etch and i cant see any diffrences between ubuntu and etch. | |||
I configured sasl and tested it but ive used sasl-sample-server and client from sasl2-bin package. when i followe tutoriam it seems ok. but I found in cyrus-sasl docs options, mech_list: GSSAPI and keytab option. | |||
You used mech_list. I thought if keytab option shows path to keytab file why don't use it instead export KRB5_KTNAME i thing the effect shoult be the same. | |||
But unfortunately i get this error | |||
sasl-sample-server: SASL Other: GSSAPI Error: Miscellaneous failure (No such file or directory) | |||
sasl-sample-server: Starting SASL negotiation: generic failure (generic failure) | |||
it shows when i dont export KRB5_KTNAME. | |||
Do you know why it is not working? | |||
If I edit /etc/default/slapd where exacly i shoutld export KRB5... | |||
This is the file: | |||
"# System account to run the slapd server under. If empty the server | |||
# will run as root. | |||
SLAPD_USER="openldap" | |||
# System group to run the slapd server under. If empty the server will | |||
# run in the primary group of its user. | |||
SLAPD_GROUP="openldap" | |||
# Path to the pid file of the slapd server. If not set the init.d script | |||
# will try to figure it out from $SLAPD_CONF (/etc/ldap/slapd.conf) | |||
SLAPD_PIDFILE= | |||
# Configure if the slurpd daemon should be started. Possible values: | |||
# - yes: Always start slurpd | |||
# - no: Never start slurpd | |||
# - auto: Start slurpd if a replica option is found in slapd.conf (default) | |||
SLURPD_START=auto | |||
# slapd normally serves ldap only on all TCP-ports 389. slapd can also | |||
# service requests on TCP-port 636 (ldaps) and requests via unix | |||
# sockets. | |||
# Example usage: | |||
# SLAPD_SERVICES="ldap://127.0.0.1:389/ ldaps:/// ldapi:///" | |||
# Additional options to pass to slapd and slurpd | |||
SLAPD_OPTIONS="" | |||
export KRB5_KTNAME=/etc/ldap/ldap-host.keytab | |||
SLURPD_OPTIONS="" | |||
" | |||
is this good place. I'm new with sasl and rest. | |||
thank for help | |||
Wojtek Giel | |||
==Notes== | ==Notes== | ||
If you find a place where this Howto seems most appropriate to you, please feel free to copy it there. But please drop me a note so that I can still update it: philip (at) linuxteam (dot) at. | If you find a place where this Howto seems most appropriate to you, please feel free to copy it there. But please drop me a note so that I can still update it: philip (at) linuxteam (dot) at. | ||