I am awed and confused by the template based LDAP user creation stuff in openSuSE 10.3. It seems quite flexible and configurable. As best I can figure out, if I want to use Kerberos for authentication then I need extra attributes in the users LDAP entry. Something along the line of this stuff. objectclass: krbPrincipalAux objectclass: krbPolicyAux objectclass: krbPwdPolicyRefAux krbPrincipalName: jsmith@ACME.COM I think I should be able to get Yast to add the extra stuff by modifying the template and/or creating another plugin. Am I on the right track? Is this already taken care of somewhere? Is there documentation on how to do it? Should I be looking at using CASA for authentication, instead of Kerberos? Bill --------------------------------------------------------------------- To unsubscribe, e-mail: opensuse-security+unsubscribe@opensuse.org For additional commands, e-mail: opensuse-security+help@opensuse.org