|
|
- The Central AuthServer HOWTO, in certain sense the ancestor of this project. Introduces the "movable basedn" trick for kerberos root, and gave some hints on slapd-gssapi
- Kerberos module for apache (GSSAPI Authentication seems too heavy for bad links).
- Setting up nss-ldap over GSSAPI on
fedora and
debian.
- Setup SPNEGO/Negotiate (also on the browser side)
-
- ADkadmin, a unix command line tool that allows local generation of W2K keytabs for unix nodes without samba (neither ktpass.exe)
- The S+C Authentication Package, to get something like nss-ldap + pam-krb + mkhomedir on WinXP
- http://mailman.mit.edu/pipermail/kerberos/2004-January/004295.html
- https://lists.ubuntu.com/archives/ubuntu-users/2007-August/120773.html
One method to control authorization login into unix workstation (using pam_check_host_attr)
- http://www.openafs.org/pipermail/openafs-info/2006-March/022064.html
Some of the extended pam control arguments
- http://mailman.mit.edu/pipermail/kerberos/2004-January/004295.html
Thread about SRV records
|