Re: Help: Why SSL must be enabled when using mod_auth_kerb in httpd?

2011-03-08 Thread Russ Allbery
Frank Cusack writes: > On 3/5/11 5:17 PM +0800 Lee Eric wrote: >> I'm just thinking why SSL must be enabled when using mod_auth_kerb in >> httpd. Because password will be transferred in encryption by Kerberos. >> So is SSL used to proect the tickets or anything else? > You should never send auth

Re: Help: Why SSL must be enabled when using mod_auth_kerb in httpd?

2011-03-08 Thread Frank Cusack
On 3/5/11 5:17 PM +0800 Lee Eric wrote: > I'm just thinking why SSL must be enabled when using mod_auth_kerb in > httpd. Because password will be transferred in encryption by Kerberos. > So is SSL used to proect the tickets or anything else? You should never send authentication credentials to an u

trouble with msktutil and Windows 2008 AD

2011-03-08 Thread Rohit Kumar Mehta
From reading this list, it seems like msktutil is a much better solution for managing Linux service principles in an AD than using KTPASS.EXE. However, I seem to be having some difficulties. I set up a test AD with the domain TAD.ENGR.UCONN.EDU, and I'm trying to create some service principle