On Tuesday, June 14, 2005 2:44 pm, Paul de Vrieze wrote:
> You know that the "normal" way of doing this is to use ldap and krb5

In my opinion, LDAP, by design, is a piece of garbage. I understand the 
principle of its design, however I've never found that design to be 
beneficial for my needs. Before I made the switch to a MySQL-backed database 
to store the account information, I was using OpenLDAP; it just couldn't do 
the job.


> pam_ldap, mod_auth_pam, apache2, and mod_dav_svn seem to not be able to
> work together reliably. There is some kind of strange issue there that's
> very hard to diagnose. Using direct ldap authentication does work.

It's not the user authentication that's the problem, but rather that NSVS 
denies shadow access (appropriately) even though I don't personally need that 
requirement. I think, after a night's rest and a bit of thought, that I'll 
just add a USE flag to the NSVS ebuild to allow users to patch out that 
built-in restriction.


-- 
Anthony Gorecki
Ectro-Linux Foundation

Attachment: pgpRKpg7A3tF8.pgp
Description: PGP signature

Reply via email to