[clug-talk] Browsing a Linux network

[Ian Bruseker]

On 6/26/07, Gustin Johnson <gustin at echostar.ca> wrote:
> Actually Active Directory uses Kerberos to do the actual authenticating.
>    LDAP is a part of the picture but it is not itself an authentication
> mechanism.  Complicated stuff, but there is more than one way to do it.
>
Complicated indeed.  :-)  So, a little googling brought up some
articles talking about how both Kerberos and LDAP can be used for
authentication.  But you don't need both?  Microsoft just has both to
be difficult?  I've found info on PAM modules for both.  The first
article on setting up Kerberos that I read ragged on LDAP for not
being as secure, but then if I understand correctly, LDAP can do more
for you, so, ya, complicated.  :-)

Ian