On Tue, Apr 22, 2008 at 11:56 AM, Craig White <craig@xxxxxxxxxxxxx> wrote:
>
> On Mon, 2008-04-21 at 21:34 -0500, Les Mikesell wrote:
> > Matt Hyclak wrote:
> > > On Mon, Apr 21, 2008 at 06:39:45PM -0700, Rogelio enlightened us:
> > >> Excuse my ignorance (I just got crap on the #centos IRC channel for this
> > >> question), but is there a (easy!) way to have and IRC and/or Jabber server
> > >> relay a login to a Microsoft Active Directory server for authentication?
> > >> If there's a better question to ask this question, please point me in that
> > >> direction, and I'll be happy to do so
> > >>
> > >
> > > Well, you probably want to ask in a support channel for your IRC and jabber
> > > server software, and/or some sort of Microsoft channel.
> > >
> > > The way you've posed the question, it has nothing to do with CentOS, so I am
> > > unsurprised you got crap for it on IRC.
> >
> > I thought one of the big deals in Centos was the ability to configure
> > PAM to authenticate anywhere you want and all the apps use the same
> > settings? Isn't that true, or aren't there any jabber/IRC servers that
> > are bundled properly into the distribution?
> >
> > This sounds very much like a distro-centric question to me, even if the
> > answer turns out to be that Centos doesn't provide that.
> ----
> actually no.
>
> I am currently using ejabberd and it is not common to authenticate
> 'real' users but certain possible. The methodology of authenticating
> 'real' users would entirely depend upon the jabber server software which
> varies widely from perl to java to erlang.
>
> The point of authenticating against LDAP is rarely do you only want
> user/id authentication but you also want address books/user lists and
> other attributes that can be useful such as e-mail address.
>
> In addition, jabber servers do have to store attributes about users so
> there's little to be served by marrying PAM functions in.
>
> What you should have noticed here Les, is that Windows AD users are
> mostly clueless to how LDAP works and integrating Windows AD/LDAP into
> other software is a challenge for them.
>
> Craig
>
Why not just install OpenFire which has the AD <-> Jabber
authentication stuff built right in?
--
-matt
_______________________________________________
CentOS mailing list
CentOS@xxxxxxxxxx
http://lists.centos.org/mailman/listinfo/centos
