Reply to post: Re: (facepalm)

The D in Systemd is for Directories: Poettering says his creation will phone /home in future

vgrig_us

Re: (facepalm)

I was arguing "passwords visible", not general security challenges (as SSL certs are). And Linux ldap client has been kerberized since forever. Even Linux services (including telnet - lol) been kerberized since rhel5.

So, yeah, ldap is more secure with kerberos, obviously. And that how everyone is "doing it". Including windows ad (that includes distributing trusted cert, btw).

POST COMMENT House rules

Not a member of The Register? Create a new account here.

  • Enter your comment

  • Add an icon

Anonymous cowards cannot choose their icon

SUBSCRIBE TO OUR WEEKLY TECH NEWSLETTER

Biting the hand that feeds IT © 1998–2019