On 06/27/2012 01:50 AM, William Brown wrote:
Take a look at
for my "todo" list, and at
http://www.freeipa.org/page/DHCP_Integration_Design  for some of my
planning about this integration. Both are subject to change in the near
future however.

Document "DHCP_Integration_Design" mentions GSSAPI support which is missing in ISC DHCP. I recommend to look into SASL rather than plain GSSAPI. Implementation should be simpler than with GSSAPI.

You can look into code from https://fedorahosted.org/bind-dyndb-ldap/ . File src/krb5_helper.c contains minimal code necessary to support Kerberos 5.

src/ldap_helper.c contains bits necessary for SASL setup. Interesting parts are mostly in new_ldap_instance() and ldap_sasl_interact() functions.

Petr^2 Spacek

Freeipa-users mailing list

Reply via email to