Heimdal KDC, Windows XP and local users

Victor Sudakov vas at mpeks.no-spam-here.tomsk.su
Thu Jan 10 07:37:00 EST 2008


Javier Palacios wrote:
> > Thank you for the link, however LDAP seems superfluous for my purpose.
> > The goal was to maintain the user database in just one place, and
> > Kerberos + LDAP mean two places.

> If you choose ldap backed for heimdal-kdc (>=0.7.2) it becomes a single place.

> And it is extremely easy to tweak the scap code to just create the
> user account instead of looking up LDAP to check that user actually
> exists.

Perhaps it is easy, but anyway it would mean installing third party
software to Windows workstations, which I was trying to avoid.

-- 
Victor Sudakov,  VAS4-RIPE, VAS47-RIPN
2:5005/49 at fidonet http://vas.tomsk.ru/



More information about the Kerberos mailing list