5 May
2021
5 May
'21
3:42 p.m.
On 5/5/21 4:43 PM, Alan DeKok wrote:
So far as I know, the OpenLDAP client library doesn't support GSSAPI.
Not true. It depends on whether it was built with Kerberos support (using MIT Kerberos or heimdal libs). I guess on most Linux systems libldap has SASL/GSSAPI support.
If it does, then FreeRADIUS doesn't use it, because TLS is so much more common.
I agree TLS is way more secure. Ciao, Michael.