The SASL-GSSAPI mechanism for Novell eDirectory enables you to authenticate to eDirectory through LDAP using a Kerberos ticket. You are not required to enter the eDirectory user password. The Kerberos ticket should be obtained by authenticating to a Kerberos server.
For SASL-GSSAPI conceptual information, refer to the Novell eDirectory 8.8 What's New Guide.
NOTE:The SASL-GSSAPI mechanism is supported with eDirectory 8.8.3 or later on Linux platforms.
The following sections explain how to configure GSSAPI and describe the various tasks you can perform with Kerberos in eDirectory and give some useful additional information: