Re: Cross realm auth with MS Server 2003 and MIT kerb

BarBaar wrote: Hello, Today I started to sniff the network, while trying to setup aan cross-realm kerberos-session... (realm named: test.nl and tester.test.nl) You have lost me here. What is the W2k3 AD domain name and what is the MIT KDC realm name? Yesterday there where TEST.NL (AD) and TEST2.NL

Re: Cross realm auth with MS Server 2003 and MIT kerb

Hello, Today I started to sniff the network, while trying to setup aan cross-realm kerberos-session... (realm named: test.nl and tester.test.nl) And the sniffer (ethereal) did not tell me very much.. But he did tell me the WinXp client is requesting a TGS from the w2k3 AD KDC (which is good!). An

Re: Cross realm auth with MS Server 2003 and MIT kerb

BarBaar wrote: Hi all, I took a little step backward today. First I tried to acces a Debian telnet service with a WinXP client, and a Windows 2003 server KDC. This was no problem (the client is a member of the 2003 domain). The next step was to authenticate on a MIT KDC with the WinXP client. The

Re: Cross realm auth with MS Server 2003 and MIT kerb

Hi all, I took a little step backward today. First I tried to acces a Debian telnet service with a WinXP client, and a Windows 2003 server KDC. This was no problem (the client is a member of the 2003 domain). The next step was to authenticate on a MIT KDC with the WinXP client. The WinXP client n

Re: Cross realm auth with MS Server 2003 and MIT kerb

BarBaar wrote: [EMAIL PROTECTED] ("Douglas E. Engert") wrote in message news:<[EMAIL PROTECTED]>... So let me get this straight. You have two realms, TEST.NL (AD) and TEST2.NL MIT based. The user is [EMAIL PROTECTED] The workstation i.e. server in this case is XP box with pricipal host/[EMAIL PROT

Re: Cross realm auth with MS Server 2003 and MIT kerb

[EMAIL PROTECTED] ("Douglas E. Engert") wrote in message news:<[EMAIL PROTECTED]>... > So let me get this straight. You have two realms, TEST.NL (AD) > and TEST2.NL MIT based. > > The user is [EMAIL PROTECTED] > > The workstation i.e. server in this case is XP box with pricipal > host/[EMAIL PROT

Re: Cross realm auth with MS Server 2003 and MIT kerb

in article [EMAIL PROTECTED], BarBaar at [EMAIL PROTECTED] wrote on 10/20/04 3:57 AM: > Hi, > > I am testing a setup with cross realm authentication. I know that > there are several documents describing this setup, but none of them > work for me. I followed the instructions of MS Interoperatebili

Re: Cross realm auth with MS Server 2003 and MIT kerb

BarBaar wrote: > Hi, > > I found the following message on my w2k3 AD: > > 10/21/200411:48:35 AM KerberosError None3 N/A BART > "A Kerberos > Error Message was received: > on logon session > Client Time: > Server Time: 9:48:35. 10/21/2004 Z > E

Cross realm auth with MS Server 2003 and MIT kerb

Hi, I am testing a setup with cross realm authentication. I know that there are several documents describing this setup, but none of them work for me. I followed the instructions of MS Interoperatebility guide, and the guidelines in O'Reilly's Definite Guide to Kerberos. I am using MS Server 2003

Re: Cross realm auth with MS Server 2003 and MIT kerb

Jeffrey Altman wrote: Make sure that the only key type you have for the trust in the MIT KDC for your cross realm principals are DES-CBC-MD5 and RC4-HMAC. (RC4-HMAC requires 2003 SP1 beta). BarBaar wrote: Hi, I am testing a setup with cross realm authentication. I know that there are several doc

Re: Cross realm auth with MS Server 2003 and MIT kerb

Make sure that the only key type you have for the trust in the MIT KDC for your cross realm principals are DES-CBC-MD5 and RC4-HMAC. (RC4-HMAC requires 2003 SP1 beta). BarBaar wrote: > Hi, > > I am testing a setup with cross realm authentication. I know that > there are several documents descri