OpenLDAP with saslauthd and Kerberos - :: semicomplete.com - Jordan Sissel
OpenLDAP! I've been doing research on the internets trying to get OpenLDAP to allow simple binds that can authenticate against Kerberos. Turns out the default SASL support is to only handle GSSAPI when talking to Kerberos V servers. This means you can only authenticate if you have a kerberos tgt. Problem with SASL/GSSAPI is that address book clients aren't going to support much beyond simple authe
ケルベãƒã‚¹èªè¨¼
ãƒã‚¤ãƒ³ãƒˆ â—ケルベãƒã‚¹ï¼ˆKerberos）èªè¨¼ã¨ã¯ï¼Œè¤‡æ•°ã®ã‚µãƒ¼ãƒãƒ¼ã¨è¤‡æ•°ã®ãƒ¦ãƒ¼ã‚¶ãƒ¼ã®èªè¨¼æƒ…å ±ã‚’ä¸€å…ƒç®¡ç†ã™ã‚‹ã®ã«é©ã—ãŸã—ãã¿ã§ã‚る。やりã¨ã‚Šã™ã‚‹é€šä¿¡ã‚’æš—å·åŒ–ã™ã‚‹æ©Ÿèƒ½ã‚‚ã‚ã‚‹ â—ケルベãƒã‚¹èªè¨¼ã‚’実装ã™ã‚‹ã«ã¯ï¼Œã‚³ãƒ³ãƒãƒ¼ãƒãƒ³ãƒˆé–“ã§æ™‚刻åŒæœŸãŒå¿…è¦ â—シングルサインオンã¨ã¯ï¼Œ1回ã®èªè¨¼ã§è¤‡æ•°ã®ã‚µãƒ¼ãƒ“スを利用ã§ãるよã†ã«ã™ã‚‹ã—ãã¿ã®ã“㨠ã“ã‚Œã¾ã§ã«ãƒãƒƒãƒˆãƒ¯ãƒ¼ã‚¯ç’°å¢ƒã§åˆ©ç”¨ã•ã‚Œã¦ã„ã‚‹èªè¨¼æ–¹å¼ã‚’見ã¦ãã¾ã—ãŸãŒï¼Œä»Šå›žã¯ã‚±ãƒ«ãƒ™ãƒã‚¹èªè¨¼ã¨ã„ã†æŠ€è¡“ã‚’å¦ã³ã¾ã™ã€‚ãƒ¦ãƒ¼ã‚¶ãƒ¼æƒ…å ±ã‚’ä¸€å…ƒç®¡ç†ã—，一度å—ã‘ãŸèªè¨¼æƒ…å ±ã‚’ã»ã‹ã®ã‚µãƒ¼ãƒãƒ¼ã¸ã‚¢ã‚¯ã‚»ã‚¹ã™ã‚‹ã¨ãã«ã‚‚引ã継ã’るよã†ã«ã™ã‚‹ä»•çµ„ã¿ã§ã™ã€‚社内ãƒãƒƒãƒˆãªã©ã«å¤šæ•°ã®ãƒ¦ãƒ¼ã‚¶ãƒ¼ã¨ã‚µãƒ¼ãƒãƒ¼ãŒå˜åœ¨ã—，個々ã®ãƒ¦ãƒ¼ã‚¶ãƒ¼ã¯åŒæ™‚ã«è¤‡æ•°å°ã®ã‚µãƒ¼ãƒãƒ¼ã¸ã‚¢ã‚¯ã‚»ã‚¹ã™ã‚‹å¿…è¦ãŒã‚る時ã«å¨åŠ›ã‚’発æ®ã—ã¾ã™ã€‚ PPPã‚„RADIUSã¨ã¯é•ã† å‰å›žã¾ã§ãƒãƒƒãƒˆãƒ¯ãƒ¼ã‚¯ç’°å¢ƒã§åˆ©ç”¨ã•ã‚Œã‚‹èªè¨¼æ–¹å¼ã‚’ã„ãã¤ã‹ç´¹ä»‹ã—ã¦ãã¾ã—ãŸã€‚ã“ã“ã§ç°¡å˜ã«æ•´
AFP548 - Kerberizing Apache with Tiger Server
User Functions Username: Password: Don't have an account yet? Sign up as a New User Lost your password? Tiger Server brings the option of having Kerberized logins to web realms. This gets you that much closer to a full Single-Sign-On solution for all of your client needs. Here's some more information on what it is, and how to do a bit more with it. First off you need to have Kerberos running
1
ãŠçŸ¥ã‚‰ã›
ランã‚ング
ランã‚ング
リリースã€éšœå®³æƒ…å ±ãªã©ã®ã‚µãƒ¼ãƒ“スã®ãŠçŸ¥ã‚‰ã›
最新ã®äººæ°—エントリーã®é…ä¿¡
j次ã®ãƒ–ックマーク
kå‰ã®ãƒ–ックマーク
lã‚ã¨ã§èªã‚€
eコメント一覧を開ã
oページを開ã
AFP548 - OS X and Friends - Linux as a Server
Configuring Cross-Realm Authentication between Mac OS X Server's Open Directory and Active Directory.
Mac OS X Kerberos Extras
Mimori's Algorithms tDiary(2006-10-11) ケルベãƒã‚¹ä¸–界㮠ãƒã‚ºãƒŸãƒ¼çŽ‹å›½
AFP548 - Kerberos Part 3 - Kerberos On Member Servers
Official Apple Support
http://mimori.org/~h/tdiary/20060608.html
{{#tags}}- {{label}}
{{/tags}}