is that common to use kerberos authentication for SUN iplanet LDAP server?

[Kent Wu]

Markus,

   I know SASL/GSSAPI can do encryption according to the document
however I tried a while back to enable the encryption against AD while
doing kerberos authentication in my C program but failed. Did you really
enable the encryption successfully in the program? If so then I must
have missing something then....

Thanks.

-Kent

On Thu, 2005-09-01 at 20:24 +0100, Markus Moeller wrote:
> Craig,
> 
> you say you use SASL + SSL. As far as I know SASL/GSSAPI can do encryption 
> too. What was the reason not to use SASL/GSSAPI with encryption. And example 
> is AD, which can be accessed via SASL/GSSAPI with encryption.
> 
> Thanks
> Markus
> 
> "Craig Huckabee" <huck at spawar.navy.mil> wrote in message 
> news:4316DEC8.5060809 at spawar.navy.mil...
> > Kent Wu wrote:
> >>
> >>    So my question is that is it pretty easy to enable Kerberos for SUN 
> >> LDAP after installing SEAM? Or can SUN LDAP use other KDC as well?
> >
> >   We use Sun's LDAP server with PADL's GSSAPI plugin - we built our copy 
> > against MIT Kerberos 1.3.x and use MIT KDCs.  I think the binary versions 
> > they sold previously also use MIT Kerberos.
> >
> >   We now have several processes that regularly use only GSSAPI/SASL over 
> > SSL to authenticate and communicate with LDAP.  Works very well.
> >
> > HTH,
> > Craig
> >
> > ________________________________________________
> > Kerberos mailing list           Kerberos at mit.edu
> > https://mailman.mit.edu/mailman/listinfo/kerberos
> > 
> 
> 
> 
> ________________________________________________
> Kerberos mailing list           Kerberos at mit.edu
> https://mailman.mit.edu/mailman/listinfo/kerberos
-- 
Kent Wu <kwu at xsigo.com>
XSIGO INC.