Kerberos and LDAP for Authorization

[Luke Howard]

> I am working on using Kerberos and LDAP together. Replacing the kdb with
> LDAP seems simple enough. What I am wondering is: is it possible to send
> back Authorization details from LDAP with the Kerberos ticket or do
> Applications have to talk directly to LDAP to get the users
> Authorization details?

I did implement the beginnings of this in the users/lhoward/saml branch (see http://k5wiki.kerberos.org/wiki/Projects/SAMLInKerberos).

-- Luke