SSO and Central Administration with Kerberos and LDAP

This document is still under construction and therefore incomplete.
The documentation here is some years old. See at the modification time of the pages. Hence most is still valid. Some configuration settings can now be made much easier using configuration frontends like yast.

• Introduction
  • Motivation
  • Audience
  • Other documentation
  • What we need
  • What we want
• Kerberos setup
  • Understanding Kerberos
  • Setting up your Kerberos servers
    • Choosing a Realm
    • Edit the kerberos client config file
    • Edit the kerberos server config file
    • Edit the Kerberos Admin Server ACL config
    • Excursus to principals
    • Creating the kerberos database
  • Start the kerberos servers
  • Check your installation
    • Check Processes
    • Connect to kadmind and have a look into the database
  • Adding principals and authenticating
    • A principal for kadmin
    • Authenticating
    • Another principal
  • Setting up a kerberos client machine
  • SIngle sign on (SSO) first try
• Configuring and understanding pam
  • What the heck is pam?
  • The configuration files
  • Tweak pam
• Kerberizing Applications
  • Understanding Kerberos pt. 2
  • Kerberizing kadmin
  • Kerberizing sshd
• LDAP
  • What is LDAP?
  • OpenLDAP config files
  • LDAP schema files
  • logging
  • The root
  • performing a first ldap query
  • inserting the first object in your ldap directory
  • populating the directory
  • exploring schemas
  • adding a group
• Integrating LDAP in your unix system
  • The name service switch
    • nss with Solaris 10
  • nss_ldap security
• Postfix and cyrus imapd and kerberos and LDAP
  • Installing the mailsystem packages
  • configuring postfix
  • configuring cyrus imapd
  • configure your mail client
• Network Filesystems with kerberos
  • AFS
    • AFS Software installation
    • Configure AFS Server
    • Configure AFS Client
    • Configure AFS volumes