Kerberos with LDAP backend

MasterPit · 07-21-2017, 03:50 AM

Hi,

I have environment with Samba Domain using OpenLDAP as users database, it stores passwords, groups etc. Is there any chance to integrate Kerberos to such a system. In fact i would like to enable SSO in my domain. I dont want to change, LDAP should remain as password and users database.

Xeratul · 07-21-2017, 12:58 PM

Good luck!

sundialsvcs · 07-21-2017, 07:03 PM

Kerberos really is a different concept:

Quote:

Originally Posted by WikiPedia:

Kerberos is a computer network authentication protocol that works on the basis of 'tickets' to allow nodes communicating over a non-secure network to prove their identity to one another in a secure manner. The protocol was named after the character Kerberos (or Cerberus) from Greek mythology, the ferocious three-headed guard dog of Hades. Its designers aimed it primarily at a client–server model and it provides mutual authentication—both the user and the server verify each other's identity.

LDAP, on the other hand, assumes that it's talking on a presumed-secure network.