Kerberos vs. LDAP for authentication -- any opinions?

[Jeffrey Altman]

GSSAPI Kerberos V5 is being used for authentication!!!!
LDAP is being used for authorization.  This is not the same
as using LDAP for authentication.

Jeffrey Altman


Harry Le wrote:
> Not entirely true.  
> 
> Most LDAP servers now support the SASL/GSSAPI mechanism.   It uses Kerberos
> V5 credentials to authenticate users against LDAP directories.  This will
> not require users to change passwords.  For data privacy, use SSL.
> 
> Joseph