Single Sign On with existing LDAP running in Ubuntu

depam · 11-20-2013, 02:14 AM

Hi,

I already have a working setup of LDAP running on Ubuntu 12.04. We have a appliance that can utilize SSO so I was wondering if I can use the same server as Kerberos but without breaking my LDAP setup. Is this possible? Can I also point the Kerberos Server to a different LDAP, let's say MS AD?

kbp · 11-20-2013, 08:38 PM

Usually I'd recommend going with kerberos for authentication and ldap for user info services. I don't see why you couldn't run kerberos and ldap servers on the same host, it shouldn't break the existing clients authentication.

depam · 11-28-2013, 01:12 AM

It's just that I am having problem setting it up in Ubuntu. I already have LDAP and phpldapadmin running and also integrated with SMB. I can't seem to make it work with Kerberos. I might be doing it wrong and I can't seem to find any straight forward document.

kbp · 11-28-2013, 05:57 AM

I realise you're happy with your existing configuration but FreeIPA takes a lot of the pain away.

depam · 12-04-2013, 02:02 AM

Thanks. FreeIPA seem to meet my requirements. Will try this on Fedora 19 and see.