[#DIRKRB-8] Implement realm catalog

Directory Kerberos

Implement realm catalog

Created: 19/Oct/05 12:06 AM Updated: 07/Apr/09 09:59 PM

Return to search

Component/s:

None

Affects Version/s:

None

Fix Version/s:

None

Time Tracking:

Not Specified

Description

« Hide

DNS RFC 1035 6.1.2 describes a "catalog" that contains pointers to zone data. The same configuration mechanism makes sense for Kerberos so we will implement a realm catalog and ensure that DNS zone and Kerberos realm semantics are similar.
o apache.schema objectClass called apachedsServiceConfiguration
o STRUCTURAL objectClass MUST cn
o uses ExtensibleObject
o apacheKerberosConfiguration extends apacheServiceConfiguration
o OC apacheCatalogEntry is a mapping of a realm name attribute to a zoneBaseDN attribute
o name=example.com --> ou=users,dc=example,dc=com
o put a ou=realms under the configuration for a service instance
o add OC apacheCatalogEntry's
o pull all catalog entries into memory with a single level search under ou=realms
o use the zoneBaseDn with the InitialContextFactory. The nexus will figure out under what partition it is.

All

Comments

Work Log

Change History

Subversion Commits

Sort Order:

Alex Karasulu made changes - 07/Feb/06 02:34 PM

Field	Original Value	New Value
Key	DIRKERBEROS-31	DIRSERVER-158
Component/s		kerberos [ 12310716 ]
Fix Version/s	0.5.1 [ 12310317 ]
Project	Directory Kerberos [ 10593 ]	ApacheDS [ 12310260 ]
Affects Version/s	0.5.1 [ 12310317 ]

[ Permlink | « Hide ]

Emmanuel Lecharny added a comment - 09/Jul/08 12:42 PM

postponed

Emmanuel Lecharny made changes - 09/Jul/08 12:42 PM

Fix Version/s

2.0.0 [ 12312396 ]

Christine Koppelt made changes - 07/Apr/09 09:59 PM

Fix Version/s	2.0.0 [ 12312396 ]
Component/s	kerberos [ 12310716 ]
Key	DIRSERVER-158	DIRKRB-8
Project	Directory ApacheDS [ 12310260 ]	Directory Kerberos [ 12310910 ]