Re: Cyrus-sasl Digest, Vol 137, Issue 16
Chentao Credungtao via Cyrus-sasl <[email protected]>
| Newsgroups | gmane.comp.security.cyrus.sasl |
|---|---|
| Message-ID | <[email protected]> |
Ok thanks, i've never used Kerberos before, I'm gonna give it a try, to see if it can dispatch an auth request to various backends (LDAP, SQL, ...) Right now, Thomas Harding's idea of an openldap instance as a proxy is just what I needed, given that all my backends are openldap servers On 27/03/2017 17:00, [email protected] wrote: > Re: a proxy for multiple sasl instances Message: 1 Date: Sun, 26 Mar 2017 14:54:43 -0400 From: Giles Malet<[email protected]> To:[email protected] Subject: Re: a proxy for multiple sasl instances Message-ID:<[email protected]> Content-Type: text/plain; charset=US-ASCII Thomas Harding<[email protected]> wrote: > Why don't use an Openldap instance as proxy ? Or what about using PAM? It's designed for exactly this "stacking". We have saslauthd configured to talk to PAM, and then two different KRB servers stacked up. If auth fails on one, it tries the next. You could do the same for LDAP. g ------------------------------ Subject: Digest Footer _______________________________________________ Cyrus-sasl mailing list [email protected] https://lists.andrew.cmu.edu/mailman/listinfo/cyrus-sasl ------------------------------ End of Cyrus-sasl Digest, Vol 137, Issue 16 *******************************************