Talking with Kerberized services using GSS-API

Sabu Shefeeq sst at india.hp.com
Mon Oct 21 09:06:34 EDT 2002


Luke,
	I am aware of this plugin, my understanding is that as of now
it does not provide data encryption support (privacy and integrity)
for the data send between LDAP client and the LDAP directory.
Please correct me if I am wrong.
Sabu
----

Luke Howard wrote:
> 
> >That sounds interesting, could you please tell me which are the LDAP
> >clients which support this? I guess they in turn use the gss_wrap/unwrap
> >itself.
> 
> Both OpenLDAP with Cyrus SASL, and the Mozilla client library with
> PADL's GSS-SASL plugin (which HP are a licensee of) support this
> 
> -- Luke
> 
> --
> Luke Howard | PADL Software Pty Ltd | www.padl.com



More information about the Kerberos mailing list