Closed
Bug 693650
Opened 13 years ago
Closed 13 years ago
Need an LDAP server that has a Kerberos auth for GSSAPI
Categories
(Mozilla Messaging Graveyard :: Release Engineering, defect)
Mozilla Messaging Graveyard
Release Engineering
Tracking
(Not tracked)
VERIFIED
FIXED
People
(Reporter: standard8, Assigned: gozer)
References
Details
For trying to test out issues with kerberous (e.g. bug 671827) we need an LDAP server with kerberous.
Please can we get one set up.
Comment 1•13 years ago
|
||
And we need a kerberos ticket server, I believe, for the ldap server to be useful :-)
Assignee | ||
Comment 2•13 years ago
|
||
(In reply to Mark Banner (:standard8) from comment #0)
> For trying to test out issues with kerberous (e.g. bug 671827) we need an
> LDAP server with kerberous.
What servers do you need ? IMAP/SMTP/POP ?
Comment 3•13 years ago
|
||
For the purposes of this bug, just LDAP, along with whatever server we need to be able to do kerberos auth, which, as I understand it, is a server/service to issue Kerberos tickets.
Assignee | ||
Updated•13 years ago
|
Summary: Need an LDAP server that has a kerberous auth for GSSAPI → Need an LDAP server that has a Kerberos auth for GSSAPI
Assignee | ||
Comment 4•13 years ago
|
||
I'll setup a FreeIPA (http://freeipa.org/) server in testing, it has kerberos + ldap out of the box, so this should be sufficient for testing purposes, right ?
Status: NEW → ASSIGNED
Comment 5•13 years ago
|
||
(In reply to Philippe M. Chiasson (:gozer) from comment #4)
> I'll setup a FreeIPA (http://freeipa.org/) server in testing, it has
> kerberos + ldap out of the box, so this should be sufficient for testing
> purposes, right ?
My understanding is that you need an authentication server and a ticket granting server http://en.wikipedia.org/wiki/Kerberos_(protocol)
The client logs on to Kerberos, and gets a ticket. Then, when Thunderbird tries to connect to the ldap server, it gets the ticket from a gssapi call, and uses that to authenticate to the ldap server.
If you're saying that the FreeIPA (oh, if only IPA's were free! :-) ) does that, then yes. I'll look at the doc on the freeipa site.
Comment 6•13 years ago
|
||
OK, yes, that should work, thx!
Reporter | ||
Comment 7•13 years ago
|
||
gozer: how is this progressing?
Assignee | ||
Comment 8•13 years ago
|
||
(In reply to Mark Banner (:standard8) from comment #7)
> gozer: how is this progressing?
VM should be up and running today/tomorrow.
Assignee | ||
Updated•13 years ago
|
Status: ASSIGNED → RESOLVED
Closed: 13 years ago
Resolution: --- → FIXED
Comment 9•13 years ago
|
||
thx very much for your help with this, Gozer.
Updated•13 years ago
|
Status: RESOLVED → VERIFIED
You need to log in
before you can comment on or make changes to this bug.
Description
•