LDAP + KERBEROS

Hello!

I want to test Kerberos + LDAP configuration but I can’t see any good and fresh tutorial for beginners :wink: I need to understand the idea of that connection. As I know Kerberos is for authentication and LDAP is for authorization but how they cooperate? Client is asking Kerberos for ticket, then asks LDAP if password is correct and then user can access system?

May be if that topic will be solved fully, it will be possible to write some article in wiki in future :slight_smile:

A little about: Kerberos V5 System Administrator’s Guide

I decided that the easiest way to understand it will be configuring it step by step :slight_smile:

First is LDAP. I have red in openLDAP documentation that ldap slapd.conf file is depreciated and now slapd-config have to be used but after openLDAP installation I see only slapd.conf file. How can I check which way (conf/config) is now used by server?

I would start by looking in the logs or documentation :slight_smile:

Best regards,
Greg

It is too fast for logs :wink: I’m looking into documentation but I can’t find there how can I check if LDAP is using conf file or slapd-config. Only one info is that since LDAP 2.3 slapd-config is supported.

I’m trying to solve that topic in Yast config. We will see if it is possible :slight_smile:

First problem with YaST installation :confused:
When I try to configure LDAP this way
ifotos.pl - najlepszy darmowy hosting zdjęć i obrazków!

ifotos.pl - najlepszy darmowy hosting zdjęć i obrazków!
ifotos.pl - najlepszy darmowy hosting zdjęć i obrazków!
ifotos.pl - najlepszy darmowy hosting zdjęć i obrazków!

I think that TLS in net necessary now…

ifotos.pl - najlepszy darmowy hosting zdjęć i obrazków!
http://ifotos.pl/zobacz/ldap6png_rpxhsaa.png/
ifotos.pl - najlepszy darmowy hosting zdjęć i obrazków!

I have error using LDAP-Browser - “Invalid DN”

http://s4.ifotos.pl/mini/ldapbrows_rpxrhqp.png](http://ifotos.pl/zobacz/ldapbrows_rpxrhqp.png/)
http://s4.ifotos.pl/mini/ldapbrows_rpxrhqr.png](http://ifotos.pl/zobacz/ldapbrows_rpxrhqr.png/)
http://s3.ifotos.pl/mini/ldapbrows_rpxrhqq.png](http://ifotos.pl/zobacz/ldapbrows_rpxrhqq.png/)

What that error means?