RE: SSO on Linux

Hi!,

Thank you so much Kevin, Milos, Niall & ET for your inputs. Its helpful and 
gave me many new info.

I'd like to mention the following-

1. Ive managed to setup W2K Part of Kerberos by installing SP3 Support tools - 
mainly for the KTPass commandline tool that generates keytab files for unix 
services/accounts, for use with /etc/krb5.conf

2. Using (Fedora Core 1) authconfig, have setup the system authentication, 
thereby pam to use ActiveDirectory (LDAP) for user/password information and 
W2K KDC for kerberos authentication mechanism.

3. Getting Samba 3.0.2 up and running in integrated mode with AD/Kerberos has 
been a breeze with a few changes to /etc/samba/smb.conf, /etc/nssswitch.conf 
etc as mentioned in Chapter 21 (Winbind: Use of Domain Accounts) Samba 
project documentation that comes along with the package (It's a great stuff 
indeed!). 

As of now, Samba & System Auth are touchwood. Once I login to the system 
anywhere in the domain, Samba shares are accessible and presented depending 
on the log in credentials. 

My interest at this point is - kerberising other services like Apache, VSFTPD, 
PostFix etc.

I understand, its possible to do most of these things by compiling these 
packages from source with appropriate options / modules... 

But, for ease of implementation sake, I wish to explore the possibility of 
having them up and running - out of the box (from RPMs of Fedora Core 1 
distro) - the way Samba works, before trying out from tarballs. 

For Apache, I understand mod_auth_kerb comes along with apache-2.0.48 and 
tried it. Created a keytab for apache and merged it /etc/krb5. Made required 
changes to /etc/httpd/conf/httpd.conf for Kerberos authentication... It 
didn't work citing 'internal server error' after the authentication phase, 
while accessing the site. I used IE6 which is claimed to support kerberos 
authentication - as indicated in the README of mod_auth_kerb.

Is anyone aware of any kerberised RPMs of apache / postfix / vsftpd ?

Thanks.

Regards
Spurgen