Kerberos authenticatino and ldap authorization

Tillman Hodgson tillman at
Tue Mar 6 19:00:35 UTC 2007

On Tue, Mar 06, 2007 at 10:07:57AM -0700, RJ45 wrote:
> for example I would like to installa MIT krb5 implementation from ports 
> instead of using heidmal default this because the kerberos server
> on my network is a MIT server and I can't use kadmin on FreeBSD
> to administrer the kerberos server remotely using heidmal implementation.
> Anyone has experience of MIT krb5 implementation on FreeBSD ?

The handbook has a chapter on setting up Kerberos, albeit focused on Heimdal.

In section 14.8.6 it notes that the kadmin protocol differs between
Kerberos implementations -- you have to use the MIT kadmin to administer
a remote MIT KDC.

Other than the kadmin bits (which are fairly different between the two
but isn't used by end-users anyway), it's pretty much transparent to a
Kerberos-enabled workstation which implementation it's using. I
typically install both (to different paths to avoid file conflicts)
because I like using the newest Heimdal rather than the one in base and
also because the included client applications differ. For example, MIT
has Kerberos rsh whereas the base Heimdal doesn't for some of the
platforms that I use.

If you run into any specific issues when setting it up, please post back
to the list and cc me and I'll give you a hand.


"I once bought a cellphone that had a little sticker on the box that said
 'DO NOT EAT PACKAGING MATERIAL'. There went another freebie snack at the
    - A.S.R. quote (Andreas "Buzh" Skau)

More information about the freebsd-questions mailing list