A proposal for an MIT KDC for Samba4

simo idra at samba.org
Tue Oct 13 08:23:06 MDT 2009

On Tue, 2009-10-13 at 08:42 +0200, Michael Ströder wrote:
> Dmitri Pal wrote:
> > We in the freeIPA project tried to find some solution to the problem of
> > two KDCs and two different schemas.
> Dmitri, I understand that FreeIPA has a problem with different LDAP schemas
> for both KDCs. But wouldn't it be much better to support Howard Chu's approach
> of defining a common LDAP schema for KDCs? He wrote some postings on the
> ietf-krb-wg mailing list with subject "LDAP schema for kdc".
> IMHO it's a waste of effort using MIT KDC with Samba4 if there's no
> possibility to use an existing one.

FWIW I have been working with Howard on the common schema problem and I
am 100% supportive of his work around it. But it is still a draft, so it
will take time before we can get to use this new schema.


Simo Sorce
Samba Team GPL Compliance Officer <simo at samba.org>
Principal Software Engineer at Red Hat, Inc. <simo at redhat.com>

More information about the samba-technical mailing list