Re: using Kerberos to authenticate to Active Directory from python ldap

[Michael S. <mi...@st...>]

Olivier Sessink wrote:
> 2009/4/10 Geert Jansen <ge...@bo...>:
>> As a related solution, you could have a look at python-ad [1].
>> Python-AD is built on top of python-ldap and provides lots of
>> functionality that you normally need to connect to AD built in. For
>> example, service discovery, credential management and multi-domain
>> functionality. There's a few examples on the site, including how to
>> use Kerberos credentials with AD.
> 
> I noticed that there is some C code related to Kerberos in python-ad.
> Is this code required to initialize a kerberos authentication, or is
> this just to change passwords and things like that?

You can bind with SASL/GSSAPI to AD with plain python-ldap provided you
obtained a valid TGT with kinit before (just like with command-line tool
ldapsearch).

Ciao, Michael.