Re: MIT Kerberos cross realm authentication with Windows Active Directory

2008-11-24 Thread Douglas E. Engert
Duffey, Blake A. wrote: > Thanks for your reply Douglas. Sorry if I was unclear, I'll try to clarify. > The user ID exists in AD. The resources I want to access exist in the MIT > realm. I log on to my Windows 2003 server using an ID/password which exists > in AD (effectively it is ADDOMAIN\us

Re: Client Referral Support

2008-11-24 Thread Ken Raeburn
On Nov 24, 2008, at 05:19, Srinivas Cheruku wrote: > Does this mean only Server Referrals are supported by MIT code and not > Client Referrals? That's correct. Ken Kerberos mailing list Kerberos@mit.edu https://mailman.mit.edu/mailman/lis

RE: MIT Kerberos cross realm authentication with Windows Active Directory

2008-11-24 Thread Duffey, Blake A.
Thanks for your reply Douglas. Sorry if I was unclear, I'll try to clarify. The user ID exists in AD. The resources I want to access exist in the MIT realm. I log on to my Windows 2003 server using an ID/password which exists in AD (effectively it is ADDOMAIN\user). I have a one-way trust betwe

Client Referral Support

2008-11-24 Thread Srinivas Cheruku
Hi Jeffrey Altman, >From your reply to email with subject "Question about dns_lookup_realm and domain_realm": > > > > Do we have information on which clients support referrals ? > > And are they implemented in MIT KDC (and how) ? > > > Heimdal, MIT, and Microsoft support referrals as implemented