Principal to directory object mapping

S Rahul srahul at
Thu Jul 27 01:12:48 EDT 2006

    When I wrote 'association', I was not referring to any particular way
of associating principals to directory objects (links, containment or
auxiliary class). I just wanted to propose a way to do the mapping in
the background. When I said "principal is associated with object", I
actually meant "principal is *mapped* to object". A way to implement it
in the directory has been proposed by Praveen in his mail (Sub:
Associating Kerberos identities to LDAP object).


-Rahul S.

Sam Hartman wrote:
> Hi.
> First, I think we need to distinguish two things: association and
> containment.
> Association is when a link is crated either from a directory object to
> a principal object or from a principal object to a directory object.
> Containment is when a principal auxiliar class is used inside a directory mapping.
> In your message are you talking about association or containment?

More information about the krbdev mailing list