Re: Enforce the user of Kerberos for password checking?

["Andreas B. Mundt" <andi.mundt@web.de>]

Hi,

On Sun, Aug 01, 2010 at 08:13:20PM +0200, Petter Reinholdtsen wrote:
> [Andreas B. Mundt]
> > If I understand the mail correctly, it does not set the level needed,
> > but it sort of defines/overwrites the level the connection has. 
> > 
> > To be accepted, we need to 'define' the local ldapi://
> > connection to have a ssf of 128 at least. So try with "localSSF 128". 
> 
> Ah.  Right.  Then I had completely misunderstood.  I tested using
> localssf 128, and the kdc was able to connect using ldapi://.

Hey, great! 

[...]

> Putting the list back on the recipient list, to let them know about
> this.

Oh, to exclude the list was not entended, wrong reply key, sorry.
 
> This should solve at least some of the detected errors in the current
> installation. :)

Good news :)

Cheers,

	Andi