Skip site navigation (1)Skip section navigation (2)
Date:      Tue, 14 Nov 2000 15:03:54 -0600
From:      "Jacques A. Vidrine" <n@nectar.com>
To:        Mike <mikey@kappaisle.com>
Cc:        freebsd-isp@freebsd.org
Subject:   Re: pam_ldap status?
Message-ID:  <20001114150354.A7243@hamlet.nectar.com>
In-Reply-To: <Pine.BSF.4.21.0011141542560.92286-100000@greencreek.kappaisle.com>; from mikey@kappaisle.com on Tue, Nov 14, 2000 at 03:54:55PM -0500
References:  <20001114142137.A7172@hamlet.nectar.com> <Pine.BSF.4.21.0011141542560.92286-100000@greencreek.kappaisle.com>

next in thread | previous in thread | raw e-mail | index | archive | help
[I dropped freebsd-questions, because I don't like to crosspost]

On Tue, Nov 14, 2000 at 03:54:55PM -0500, Mike wrote:
> I'm looking forward to integrating LDAP authentication for our
> shell/pop/imap/ftp/web/ssh users.

Actually, the kind of use I expect:

   = Kerberos 5 for authentication
     -- GSSAPI or SASL can be used for authentication over a network,
        e.g. GSSAPI for telnet/ssh, SASL for pop/imap

     -- pam_krb5 (in Ports) can be used for interactive authentication,
        e.g. the console, or telnet/ssh when dealing with
	GSSAPI-challenged clients (particularly on Windows)

   = LDAP for directory/authorization
     -- via nss_ldap for getpw*, getgr*, other bits of libc
     -- native API for LDAP-aware applications

-- 
Jacques Vidrine / n@nectar.com / jvidrine@verio.net / nectar@FreeBSD.org


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-isp" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20001114150354.A7243>