Hi all,<br><br>I need tu replace an old NIS with a topnotch OpenLDAP server.<br>I would like to add SSO support on my brand new architecture.<br><br>2 scenarii may occur :<br>1) Using pam_kerberos to authentaicate against KDC and retreiving information from LDAP server with SASL.
<br>The backward is that anyone (or anything)  that need to authenticate MUST be kerberos aware.<br>2) Having LDAP and Kerberos passwords synced.<br>Asset
: You can authenticate through LDAP or kerberos (pam_ldap required an
pam_kerberos optional) ie you must authenticate against LDAP and if
Kerberos autentication success you get a TGT !
<br>Backward : Two password databases to protect / lot of work on
client side / passwords must be synced (Do you now materials to do it
?).<br><br>I add that security is not a major concern for us and we got
many OS on client side that&#39;s why the 1st solution may not fit our
needs.
<br><br>Has someone ever experienced the second solution ?<br>Have you some hints and feedbacks ?<br><br>Thx,<br><br>Nico<br>