Notes on Kerberos / LDAP authentication

This will be a scratch space for the beginning of new Kerberos & LDAP page. Initially, this will be a bunch of random notes, hopefully coalesced into a document.

Reference Documents

The main reference by Danang : Building Powerful Central Authentication

Things that can use Kerberos / LDAP to authenticate

These are the things that we would like to use our K&L auth:

• NFS4 authentication/security
• automount / autofs
• sudo
• ssh / kerberos key forwarding / ldap shared keys?
• Apache web page security
• Netgroups -- limiting logins to specific machines
• AFS -- andrew file system
• Email
• radius / 802.1x for wired and wireless networks
• Samba -- be able authenticate windows clients -- perhaps using pgina.
• Mac OS/X clients?