Re: [Freeipa-users] Using FreeIPA for LDAP authentication in 3rd party applications

2013-09-13 Thread Thomas Raehalme
Hi! On Thu, Sep 12, 2013 at 3:28 PM, Martin Kosek mko...@redhat.com wrote: When using FreeIPA LDAP as identity source, you could ideally use Kerberos/GSSAPI authentication. But if that is not available, you can use simple LDAP binds too. You cannot read the hash codes unless you are

Re: [Freeipa-users] Using FreeIPA for LDAP authentication in 3rd party applications

2013-09-13 Thread Jakub Hrozek
On Thu, Sep 12, 2013 at 03:54:59PM +0300, Thomas Raehalme wrote: Hi! On Thu, Sep 12, 2013 at 3:28 PM, Martin Kosek mko...@redhat.com wrote: When using FreeIPA LDAP as identity source, you could ideally use Kerberos/GSSAPI authentication. But if that is not available, you can use simple

Re: [Freeipa-users] Using FreeIPA for LDAP authentication in 3rd party applications

2013-09-13 Thread Chris Hudson
, September 12, 2013 8:54:59 AM Subject: Re: [Freeipa-users] Using FreeIPA for LDAP authentication in 3rd party applications Hi! On Thu, Sep 12, 2013 at 3:28 PM, Martin Kosek mko...@redhat.com wrote: When using FreeIPA LDAP as identity source, you could ideally use Kerberos/GSSAPI

Re: [Freeipa-users] Using FreeIPA for LDAP authentication in 3rd party applications

2013-09-13 Thread Thomas Raehalme
Hi! On Thu, Sep 12, 2013 at 4:33 PM, Martin Kosek mko...@redhat.com wrote: Well, LDAP is the data backend for all FreeIPA identity data, you can certainly use plain LDAP binds with them (though Kerberos/GSSAPI auth is preferred). # ldapsearch -h `hostname` -D

Re: [Freeipa-users] Using FreeIPA for LDAP authentication in 3rd party applications

2013-09-13 Thread Martin Kosek
On 09/12/2013 08:29 PM, Thomas Raehalme wrote: Hi! On Thu, Sep 12, 2013 at 4:33 PM, Martin Kosek mko...@redhat.com wrote: Well, LDAP is the data backend for all FreeIPA identity data, you can certainly use plain LDAP binds with them (though Kerberos/GSSAPI auth is preferred). # ldapsearch -h

Re: [Freeipa-users] Using FreeIPA for LDAP authentication in 3rd party applications

2013-09-13 Thread Thomas Raehalme
Hi! On Thu, Sep 12, 2013 at 4:06 PM, Martin Kosek mko...@redhat.com wrote: I was just referring to fact, that when a system or application uses LDAP as an identity and authentication source, it often use simple LDAP Bind operation (i.e. accessing LDAP with user+password or) when testing if

Re: [Freeipa-users] Using FreeIPA for LDAP authentication in 3rd party applications

2013-09-13 Thread Jakub Hrozek
On Thu, Sep 12, 2013 at 04:18:49PM +0300, Thomas Raehalme wrote: Hi! On Thu, Sep 12, 2013 at 4:06 PM, Martin Kosek mko...@redhat.com wrote: I was just referring to fact, that when a system or application uses LDAP as an identity and authentication source, it often use simple LDAP Bind

[Freeipa-users] Using FreeIPA for LDAP authentication in 3rd party applications

2013-09-12 Thread Thomas Raehalme
Hi, Previously we have used Atlassian Crowd as a source for user data in various applications, both in-house built and proprietary such as JIRA or Confluence. As we have deployed FreeIPA, I would like to start using it as the identity source. Unfortunately using Kerberos is not always possible so

Re: [Freeipa-users] Using FreeIPA for LDAP authentication in 3rd party applications

2013-09-12 Thread Martin Kosek
On 09/12/2013 01:46 PM, Thomas Raehalme wrote: Hi, Previously we have used Atlassian Crowd as a source for user data in various applications, both in-house built and proprietary such as JIRA or Confluence. As we have deployed FreeIPA, I would like to start using it as the identity source.

Re: [Freeipa-users] Using FreeIPA for LDAP authentication in 3rd party applications

2013-09-12 Thread Martin Kosek
On 09/12/2013 02:54 PM, Thomas Raehalme wrote: Hi! On Thu, Sep 12, 2013 at 3:28 PM, Martin Kosek mko...@redhat.com wrote: When using FreeIPA LDAP as identity source, you could ideally use Kerberos/GSSAPI authentication. But if that is not available, you can use simple LDAP binds too. You

Re: [Freeipa-users] Using FreeIPA for LDAP authentication in 3rd party applications

2013-09-12 Thread Martin Kosek
On 09/12/2013 03:18 PM, Thomas Raehalme wrote: Hi! On Thu, Sep 12, 2013 at 4:06 PM, Martin Kosek mko...@redhat.com wrote: I was just referring to fact, that when a system or application uses LDAP as an identity and authentication source, it often use simple LDAP Bind operation (i.e.

Re: [Freeipa-users] Using FreeIPA for LDAP authentication in 3rd party applications

2013-09-12 Thread Jakub Hrozek
On Thu, Sep 12, 2013 at 02:28:45PM +0200, Martin Kosek wrote: # ldapadd -h `hostname` -D cn=Directory Manager -x -w kokos123 ^^ 0wn3d :-)