LinuxQuestions.org - Kerberos with LDAP backend

- Linux - Server (https://www.linuxquestions.org/questions/linux-server-73/)

- - Kerberos with LDAP backend (https://www.linuxquestions.org/questions/linux-server-73/kerberos-with-ldap-backend-4175610318/)

Kerberos with LDAP backend

Hi,

I have environment with Samba Domain using OpenLDAP as users database, it stores passwords, groups etc. Is there any chance to integrate Kerberos to such a system. In fact i would like to enable SSO in my domain. I dont want to change, LDAP should remain as password and users database.

Kerberos really is a different concept:

Quote:

Originally Posted by WikiPedia:

Kerberos is a computer network authentication protocol that works on the basis of 'tickets' to allow nodes communicating over a non-secure network to prove their identity to one another in a secure manner. The protocol was named after the character Kerberos (or Cerberus) from Greek mythology, the ferocious three-headed guard dog of Hades. Its designers aimed it primarily at a client–server model and it provides mutual authentication—both the user and the server verify each other's identity.

LDAP, on the other hand, assumes that it's talking on a presumed-secure network.