> I have a LDAP/GSSAPI/Kerberos system up and running. I have 2 questions:
> 1. In the moment this system does only authentication. But what I want
> is that "somewhere in this system" I can define to which of our servers
> the specific user has access. Clearly, I need information about how to
> do the authorization.
> 2. Last night, I fiddled around with authenticating windows clients to
> kerberos. I used the information in
> http://sial.org/howto/kerberos/windows/. Well, the authorization works,
Err. Of course that should read "authentication". Sorry
> but after that Windows does not "know" what to do with this user. Are
> there any tools out there that do that job (like creating a volatile
> user and giving him some default rights)?
> Any ideas?
> Many thanks in advance
Kerberos mailing list [hidden email] https://mailman.mit.edu/mailman/listinfo/kerberos