Re: [Ldapdns-users] tripple egg&chicken ?

[Mrs. B. <mrs...@ni...>]

LDAPDNS doesn't now and will likely never work with Kerberos.

LDAPDNS is almost always connected to your OpenLDAP server, and should
run as it's own user-id and group-id.

If your LDAPDNS is on the same network as your OpenLDAP, a user would
have to break TCP in order to cause problems. They'll likely have an
easier time breaking either of the machines, or if so included, your
kerberos servers.

So make OpenLDAP and LDAPDNS work by themselves using either a shared
secret or IP-based access control.


On Thu, 2005-12-22 at 12:37 +0200, user local wrote:
> As I read, ldapdns does the beautiful job to simplify the DNS service,
> reading from LDAP. OpenLDAP seems to be most secured w/ Kerberos.
> Kerberos is recommended to be installed based on the DNS registries in
> turn.
> 
> Which is the first setup to be done?
> 
> RTFM will be appreciated, especially if a reference will be pointed
> out.
> 
> TIA
> 
> [PS As you can figure out I'm not much of a hacker, I'm just an Open
> Source and friends fun, and, I hope, further supporter]
> 
> 
> 
> -- 
> OP1 CP116
> 700037
> Iaşi
> România