W2K3 - Secure LDAP Connection

[Dupuis Dominic]

Bonjour,

I search how to authenticate to a W2K3 server, via Kerberos 5 or any other secure way (like SSL/TLS), and I found in a mail in the perl.ldap group, that you seem to be able to do that via the Authen::SASL module...can you just send me a web page, code examples or any other tips on how can I do that? All I want to do is to see the members of a group in a W2K3 domain... I can actually do it via Net::LDAP but I will have no other choice than to go with a secure connection really soon... My code can run on a Windows machine but I would like (if it's possible) to run it on a Unix one.

Thanks for any help! :-)

----
Dominic Dupuis
Services Techniques
Direction Bureautique
Maintenance serveurs
Tél: 514-840-3000 x6241
dupuis....@hydro.qc.ca <blocked::blocked::mailto:dupuis....@hydro.qc.ca>

[Achim Grolms]

On Tuesday 22 August 2006 15:05, Dupuis....@hydro.qc.ca wrote:
> Bonjour,
>
> I search how to authenticate to a W2K3 server, via Kerberos 5 or any
> other secure way (like SSL/TLS), and I found in a mail in the perl.ldap
> group, that you seem to be able to do that via the Authen::SASL
> module...can you just send me a web page, code examples or any other tips
> on how can I do that?

Kerberos5 by Authen::SASL::Perl::GSSAPI:

<http://perl.grolmsnet.de/authensasl/>

Achim

[Dupuis Dominic]

Achim,

How can I create a valid TGT in credentials cache (via kinit) if I use a SUN Solaris server? Any example?

Thanks a lot!

----
Dominic Dupuis
Services Techniques
Direction Bureautique
Maintenance serveurs
Tél: 514-840-3000 x6241
dupuis....@hydro.qc.ca

-----Message d'origine-----
De : Achim Grolms [mailto:ac...@grolmsnet.de]
Envoyé : mardi 22 août 2006 09:10
À : Dupuis, Dominic
Cc : perl...@perl.org
Objet : Re: W2K3 - Secure LDAP Connection

[Achim Grolms]

On Wednesday 23 August 2006 16:22, Dupuis....@hydro.qc.ca wrote:
> Achim,
>
> How can I create a valid TGT in credentials cache (via kinit) if I use a
> SUN Solaris server? Any example?

I don't understand what your question means.
is it

- "How to use kinit" (read man kinit)

or

- "Where to get kinit" (Solaris ships with a Kerberos5 implementation.
or use MIT Kerberos or Heimdla instead

or

- "How to configure Kerberos to use my W2003 AD as KDC" (read man krb5.conf)

Or do you have other problems I don't understand?

Achim