On 6/26/07, Gustin Johnson <[EMAIL PROTECTED]> wrote: > Actually Active Directory uses Kerberos to do the actual authenticating. > LDAP is a part of the picture but it is not itself an authentication > mechanism. Complicated stuff, but there is more than one way to do it. > Complicated indeed. :-) So, a little googling brought up some articles talking about how both Kerberos and LDAP can be used for authentication. But you don't need both? Microsoft just has both to be difficult? I've found info on PAM modules for both. The first article on setting up Kerberos that I read ragged on LDAP for not being as secure, but then if I understand correctly, LDAP can do more for you, so, ya, complicated. :-)
Ian _______________________________________________ clug-talk mailing list [email protected] http://clug.ca/mailman/listinfo/clug-talk_clug.ca Mailing List Guidelines (http://clug.ca/ml_guidelines.php) **Please remove these lines when replying
