Configuring Sasl Identity Mapping From The Command-Line; Configuring Kerberos; Realms - Red Hat DIRECTORY SERVER 8.0 - ADMINISTRATION Administration Manual

• Search base DN. This field gives the base DN to search to map entries,
such as ou=People,dc=example,dc=com. This field corresponds to the
nsSaslMapBaseDNTemplate value in the SASL mapping LDIF entry.
• Search filter. This field gives the search filter for the components to replace, such as
(objectclass=*). This field corresponds to the nsSaslMapFilterTemplate value in the
SASL mapping LDIF entry.
To edit a SASL identity mapping, highlight that identity in the SASL Mapping tab, and click Modify.
Change any values, and save.
To delete a SASL identity mapping, highlight it and hit Delete. A dialog box comes up to confirm the
deletion.
12.4. Configuring SASL Identity Mapping from the
Command-Line
To configure SASL identity mapping from the command-line, use the ldapsearch utility to configure
an identity mapping scheme, such as the following:
objectclass: top
objectclass: nsSaslMapping
cn: mymap2
nsSaslMapRegexString: \(.*\)
nsSaslMapBaseDNTemplate: ou=People,dc=example,dc=com
nsSaslMapFilterTemplate: (cn=\1)
This will match any user ID and map to the result of the the subtree search with base
ou=People,dc=example,dc=com and filter cn=userId.
For more information on the ldapsearch utility, see

12.5. Configuring Kerberos

Kerberos v5 must be deployed on the system to utilize the GSS-API mechanism for SASL
Table 12.1, "Supported Kerberos Systems"
authentication.
supported by various platforms. GSS-API and Kerberos client libraries must be installed on the
Directory Server host to take advantage of Kerberos services.
Operating System
Linux
HP-UX 11i
Sun Solaris
Table 12.1. Supported Kerberos Systems

12.5.1. Realms

A realm is a set of users and the authentication methods for those users to access the realm. A realm
resembles a fully-qualified domain name and can be distributed across either a single server or a
single domain across multiple machines. A single server instance can also support multiple realms.

Configuring SASL Identity Mapping from the Command-Line

Appendix B, Finding Directory
summarizes the Kerberos applications
Kerberos Version
MIT Kerberos version 5
HP Kerberos version 2.1
SEAM 1.0.1
Entries.
369