OpenLDAP and Keberos 5 - How to

Brian Candler B.Candler at
Mon Apr 18 12:23:00 EDT 2011

On Mon, Apr 18, 2011 at 02:58:29PM +0700, Nguyen, Quoc Khanh wrote:
> i just want to configure and install Keberos 5 for OpenLDAP system only. So
> i have read a lot of document about keberos, and feel that they didn't met
> my requirement. 
>  I... I don't know how to begin with it. 

Here are some presentations I did earlier in the year:

And the exercises that went with them:

The presentations are very much in note form - they are not supposed to
eliminate the need for a presenter to explain what's going on. However the
lab setup includes building a KDC plus and OpenLDAP server which requires
clients to use Kerberos authentication. You may be able to extract some
useful hints from it. This is all tested using Ubuntu 10.04 LTS.

In summary I'd say:
- build your Kerberos KDC (if you don't already have one)
- get to the point where 'kinit' works
- build your OpenLDAP server and configure it for GSSAPI authentication
- use the ldapsearch command line with -Y GSSAPI to test it



More information about the Kerberos mailing list