Hi Team, I have ldap setup and kerberos setup.
Requirement: 1. We have list of users in ironport ldap and want to sync particular group cn to kerbros and its password. So that both ldap and. kerberos will have same password. 2. I want to create user object in ldap with multiple user alias like uid=alice, krbPrincipalAliases: alice/ad...@domain.com krbPrincipalName: alice/ad...@domain.com Achieved 1. I have complied smbkrb5passwd module to sync user and its password from ldap to kerberos. Here uid is creating as principal in kerberos. Not working. I have added user data like this ++++ dn: uid=wilf,ou=people,dc=domain,dc=com objectClass: inetOrgPerson objectClass: posixAccount objectClass: shadowAccount objectClass: krbprincipalaux objectClass: krbTicketPolicyAux uid: wilf cn: wilf/admin sn: Fernandz loginShell: /bin/bash uidNumber: 10003 gidNumber: 10003 homeDirectory: /home/wilf shadowMax: 60 shadowMin: 1 shadowWarning: 7 shadowInactive: 7 shadowLastChange: 0 krbPrincipalAliases: wilf/admin@DOMAINCOM krbPrincipalName: wilf/ad...@domain.com ++++ But in kerberos, the principal creating as w...@domain.com but krbPrincipalAliases not creating as prinicipal. Even I tried creating this user wilf/admin@DOMAINCOM in kerberos manually and tried changing password for uid wilf but alias and uid is not mapped so it is not updating. How can we achieve adding multiple principal alias for the same userobject. ?. I dont want to add multiple user and manage inldap. I am kind of blocked here. Please help me. Regards K.Keerthiga ________________________________________________ Kerberos mailing list Kerberos@mit.edu https://mailman.mit.edu/mailman/listinfo/kerberos
