ldap vs kerberos authentication for idpv3

[Simon Lundström]

On Wed, 2016-02-10 at 19:47:40 +0000, Cantor, Scott wrote:
> > Granted; on the other hand, I don't necessarily want to deploy alpha quality
> > code in production :).
> 
> If the KDC check fails, it won't let you login, but that won't suddenly stop working in production. Rod tried to make it work with AD and couldn't, […]

Very interesting, I wonder why that was.

> and I had no quick way to try it and lots of more important things to
> get done for the release,

The code works perfectly, thank you for fixing that! Appreciate it much
more than having to firewall outbound traffic in the IDP to only talk
Kerberos to our KDCs (which is the alternative).

> so I just tested MIT and left it there.

Works with Heimdal too, for the record.

BR,
- Simon