Skip to Content.
Sympa Menu

freetds - Re: UG clarification

freetds AT lists.ibiblio.org

Subject: FreeTDS Development Group

List archive

Chronological Thread  
  • From: James K. Lowden <jklowden AT speakeasy.org>
  • To: TDS Development Group <freetds AT franklin.oit.unc.edu>
  • Subject: Re: UG clarification
  • Date: Wed, 12 Jun 2002 19:43:43 -0400


On Wed, 12 Jun 2002 16:55:45 -0500 "Steve Langasek"
<vorlon AT netexpress.net> wrote:

> On Wed, Jun 12, 2002 at 05:51:16PM -0400, Brian Bruns wrote:
>
> > LDAP is not bad actually, when used within a certain context, like
> > user information. Where I work it's hard to remember not being able
> > to pull user info from a central store. Using it as a corporate-wide
> > authentication source is very compelling.
>
> Nah, LDAP isn't a good fit for authentication, even though people are
> making it work. LDAP is designed as a /directory/ service, with all
> that implies (semi-public, etc). For a centralized authentication
> source, use Kerberos instead. :)

Once upon a time (remember those long domain-login discussions?) I thought
maybe we'd emulate domain logins with Kerberos. AFAIK, Sybase still
relies 100% on clear text passwords, but that's no reason to have to embed
them in scripts and whatnot.

But I'm still looking for the Kerberos document for People Who Don't Care
Very Much. The Kerberos folks, bless their untrusting little hearts, want
to authenticate everything and everyone, which is fine I guess, but the
learning curve looks like the face of Mount Rushmore to me. :/

I guess that puts me in the authentication plug-in camp, too, Brian.
FWIW.

--jkl





Archive powered by MHonArc 2.6.24.

Top of Page