| commit | dcd029169424d8846c1fbb0b1527516a4a026b27 | |
| author | Andrew Tridgell <tridge@samba.org> | |
| Fri, 30 Aug 2002 06:59:57 +0000 (30 06:59 +0000) | ||
| committer | Andrew Tridgell <tridge@samba.org> | |
| Fri, 30 Aug 2002 06:59:57 +0000 (30 06:59 +0000) | ||
| tree | 0d1ca640b6c60ebf20458154b19c2f557a0b8f60 | treesnapshot (tar.gz zip) |
| parent | a6ace770eb9b11271803215f218bf772fa7d9faa | commitdiff |
convert the LDAP/SASL code to use GSS-SPNEGO if possible
we now do this:
- look for suported SASL mechanisms on the LDAP server
- choose GSS-SPNEGO if possible
- within GSS-SPNEGO choose KRB5 if we can do a kinit
- otherwise use NTLMSSP
This change also means that we no longer rely on having a gssapi
library to do ADS.
todo:
- add TLS/SSL support over LDAP
- change to using LDAP/SSL for password change in ADS
(This used to be commit b04e91f660d3b26d23044075d4a7e707eb41462d)
we now do this:
- look for suported SASL mechanisms on the LDAP server
- choose GSS-SPNEGO if possible
- within GSS-SPNEGO choose KRB5 if we can do a kinit
- otherwise use NTLMSSP
This change also means that we no longer rely on having a gssapi
library to do ADS.
todo:
- add TLS/SSL support over LDAP
- change to using LDAP/SSL for password change in ADS
(This used to be commit b04e91f660d3b26d23044075d4a7e707eb41462d)