[Freeipa-devel] [PATCH] 0001 Provide Kerberos over HTTP (MS-KKDCP)
Nathaniel McCallum
npmccallum at redhat.com
Mon Jun 22 14:22:22 UTC 2015
On Mon, 2015-06-22 at 10:10 -0400, Simo Sorce wrote:
> On Mon, 2015-06-22 at 10:01 -0400, Nathaniel McCallum wrote:
> > I'd still prefer a user mapping to managing a keytab. This patch is
> > just way too complex for what it does.
>
> User mapping ?
EXTERNAL bind
> > ----- Original Message -----
> > > I brought up your suggestion in today's IPA devel meeting. Simo
> > > explained that anonymous binding might not be available. Some
> > > customers
> > > disable it on their systems. I'd have to find yet another way to
> > > authenticate, e.g. using the user account. That would only work
> > > locally,
> > > though.
> > >
> > > Let's go ahead with my current approach. It's implemented and I
> > > have
> > > tested upgrade and refresh installation a couple of times, too.
> > >
> > > Christian
> > >
> >
>
>
More information about the Freeipa-devel
mailing list