Grouper Users - Open Discussion List

[Rob Hebron <>]

On 12/04/12 14:40, Chris Hyzer wrote:
> Penn is planning to install and maintain a central Active Directory 
> service.  A couple of questions:
> 
> 1. Does anyone delegate the authentication to kerberos or radius?  How does 
> that work?

For MIT kerberos these may be of interest:

http://projects.oucs.ox.ac.uk/maddox/MADDOX_Final_Report_v1.pdf
http://www.oucs.ox.ac.uk/services/iam/kerberos/ad-xrt-howto.xml

There are many pitfalls, not least that may applications that claim to
support AuthN to AD do not support Kerberos.


Rob