Re: Openldap, kerberos backend, and SASL

Da Rock wrote:

Openldap has a good documentation project, but they have no idea of the Heimdal implementation

Note that

1. you can build OpenLDAP as kerberized demon with both KRB5 implementations (heimdal and MIT) and

2. you can also use recent versions of the MIT KDC with a LDAP backend (not only OpenLDAP's slapd). To make matters worse both schemas differ.

Given that I think it's outside the scope of the OpenLDAP admin guide to speak about how to use OpenLDAP as a heimdal LDAP backend.

Ciao, Michael.