[Triage-desktop] [Bug 3108] New: OpenLDAP needs Heimdal Kerberos support restored!

bugzilla-daemon bugzilla-daemon at rosalab.ru
Sun Nov 10 20:25:10 MSK 2013


          Priority: Normal
            Bug ID: 3108
          Assignee: triage-desktop at lists.rosalab.ru
           Summary: OpenLDAP needs Heimdal Kerberos support restored!
        QA Contact: triage-desktop at lists.rosalab.ru
          Severity: normal
    Classification: ROSA Desktop
                OS: Linux
       RPM Package: openldap-servers
          Reporter: zombie_ryushu at yahoo.com
          Hardware: All
            Status: CONFIRMED
           Version: Marathon 2012
         Component: -Enter Bugs Here-
           Product: Desktop Bugs

OpenLDAP does not produce smbk5pwd.la due to a decsion to compile it without
Heimdal. This needs to be reversed. 


While nss-ldapd is used for the nsswitch.conf uses LDAP for Authorization,
actual authentication by PAM takes place with pam_krb5. smbk5pwd was used to
sync up OpenLDAP Posix, Samba, and Heimdal Kerberos passwords. (Heimdal used
OpenLDAP as its backend database.)

When libuser.conf was configured to utilize LDAP such that userdrake, lpasswd,
luseradd, etc could alter passwords and usernames, smbk5pwd made sure those
password changes all said the same thing. Now that has stopped working, because
the password sync only syncs OpenLDAP and Samba, and not Heimdal. (resulting in
passwords not being changed.)

Please restore the prior functionality.

You are receiving this mail because:
You are the QA Contact for the bug.
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.rosalab.ru/pipermail/triage-desktop/attachments/20131110/894f18f8/attachment.html>

More information about the Triage-desktop mailing list