krb5-adsync

MIT Kerberos Plugin for Synchronizing to Active Directory

krb5-adsync is a plugin for MIT Kerberos v1.9+. It hooks on password changes, principal modifications, and principal deletions, and syncs those operations to active directory. It's based on krb5sync by Russ Allbery (available at http://www.eyrie.org/~eagle/software/krb5-sync/), but uses the new plugin API and puts more emphasis on interacting with Active Directory with LDAP - allowing per-OU filtering of password synchronization, and hooks on more operations than just password changes.

Project Information

The project was created on Jun 18, 2011.

Labels:
Password C