Samba authentication to Kerberos via OpenLDAP, third and last try

Michael Ströder michael at stroeder.com
Tue Apr 8 08:39:58 EDT 2008


Wes Modes wrote:
> Michael Ströder wrote:
>>
>> Maybe you should think about why "creative hacks" are not a good idea 
>> and therefore the experts do not suggest any. Kerberos has a certain 
>> security model. For security reasons the TGT is not something which 
>> should be stored everywhere. I also consider the saslauthd hack with 
>> {SASL}username at MYREALM.EDU to be not acceptable.
>
> The sactamonious and arrogant attitude of list denizens towards people 
> who do not already know everything there is to know about a subject, do 
> nothing to make the development community more secure or more 
> competent.  In fact, it create a culture of hyper-criticism in which 
> people are afraid to ask perfectly reasonable and important questions.

I whole-heartly agree. But funny that *you* mention that.

Ciao, Michael.



More information about the Kerberos mailing list