At 08:51 AM 9/22/2006, Jeremiah Martell wrote: >Hmmm. So when I do a LDAP+SASL+GSSAPI(Kerberos) bind, openldap just >talks to the Kerberos library to do all things kerberos?
OpenLDAP talks to the Cyrus SASL library, which talks with a GSSAPI library, which talks with a Kerberos library... Kerberos credential management is left to the Kerberos library. >What about using the Kerberos service ticket to bind to the server? Likewise. Kurt
