2009/12/7 John Joseph <[email protected]>: > Hi Unni > Thanks , In my setup right now there is no DNS server, one of the > pre-requisite for Kerbos is DNS server . Is it a good idea to go with LDAP > authentication only > Thanks > Joseph John >
LDAP gives you single password authentication, if all you need is authentication to desktops/laptops/local machines, then LDAP would be sufficient. But if you want your web applications (and other apps with kerberos support) to work without asking for password, Kerberos would be the way to go. LDAP alone can't handle session information, so every application will ask for password. With kerberos, you need to enter the password only once to generate a kerberos ticket, all kerberos enabled applications can use that ticket without asking for password again. -- പ്രവീണ് അരിമ്പ്രത്തൊടിയില് <GPLv2> I know my rights; I want my phone call! <DRM> What use is a phone call, if you are unable to speak? (as seen on /.) Join The DRM Elimination Crew Now! http://fci.wikia.com/wiki/Anti-DRM-Campaign _______________________________________________ Indian Libre User Group Cochin Mailing List http://www.ilug-cochin.org/mailing-list/ http://mail.ilug-cochin.org/mailman/listinfo/mailinglist_ilug-cochin.org #[email protected]
