ktpass with principal name different than domain controller domain

Hi, I am trying to do the following: ktpass -princ HTTP/[EMAIL PROTECTED] mapuser user -pass password01. The command is run on a domain controller with a different domain than what is specified in the service name, e.g. DOMAIN2.COM. Is this possible? Many thanks, Celia

Re: Getting Service Ticket..

The Kerberos service ticket is stored in the Subject's private credentials, after successful authentication, if useSubjectCredsOnly property is set to true. This feature is available starting from J2SE 1.4.2. Seema [EMAIL PROTECTED] wrote On 02/14/06 03:18,: hello this is zaheer here.. i am a

Re: ktpass with principal name different than domain controller domain

Celia Clark wrote: Hi, I am trying to do the following: ktpass -princ HTTP/[EMAIL PROTECTED] mapuser user -pass password01. The command is run on a domain controller with a different domain than what is specified in the service name, e.g. DOMAIN2.COM. Is this possible? It should

Re: Getting Service Ticket..

[EMAIL PROTECTED] wrote: hello this is zaheer here.. i am a bit confused like how to get service ticket after obtaining the TGT using GSS Jaas API, cuold any one let me know about the same.I did not understand how to send the TGT to the server. The GSS libraries will handle using the

[no subject]

Hello,i am student in a University in Greece and i would like to inform me if a progamm that has built in language C can co-operate with Kerberos. Thank you.. - Χρησιμοποιείτε Yahoo! Βαρεθήκατε τα ενοχλητικά μηνύ ματα (spam); Το Yahoo!

ktpass with principal name different than domain controller name

Hi, I am trying to do the following: ktpass -princ HTTP/[EMAIL PROTECTED] mapuser user -pass password01. The command is run on a domain controller with a different domain than what is specified in the service name, e.g. DOMAIN2.COM. Is this possible? Many thanks, Celia

kerberos+sasl+openldap

Hi, I recently started to install a central authentication server with openldap, kerberos, sasl etc on a test server for starters. I installed kerberos, but when I try to start kinit it returns an error stating: kinit(v5): Cannot resolve network address for KDC in requested realm while

Kerberos MIT + windows workstations

Hi, I have a working Kerberos/LDAP environment. Now I'm trying to authenticate Windows clients against Kerberos. I followed the instructions in http://sial.org/howto/kerberos/windows/ but get an error message at login. Unfortunately the message is in German: Sie können aufgrund folgenden

[ANNOUNCE] Perl GSSAPI version 0.18 at CPAN

Perl-GSSAPI Adapter version 0.18 GSSAPI-Perl adapter for using GSSAPI C-bindings as described in RfC RFC 2744 from Implementations like MIT Kerberos or Heimdal. The module is based on GSSAPI 0.13 written by Philip Guenther The newest version is available at CPAN

Re: kerberos+sasl+openldap

Hi Arnoud, Use of DNS is controlled via krb5.conf, with three directives. I looked at the MIT man page for krb5.conf. Note that this is different to the man page from vendors such as Sun, you should be looking at the file /krb5/man/man5/krb5.conf.5. In any case these directives are described

Re: Kerberos MIT + windows workstations

No, that's what I want to avoid since we have some 1000 workstations. ;-) I'm thinking(dreaming?) of an equivalent to pam_mkhomedir.so or maybe a windows logon script that does the job. It's possible but it gets tricky, and because each local account will have a different SID, authorization