R: Multiple AD domains and MIT Kerberos

2007-03-02 Thread Eric Schwarz
Hello, We have a situation where we are trying to get AIX Kerberos to interoperate with Microsoft w2k3 AD 4-domain forest. The challenge is to get the krb5.conf configuration to allow for the SPN to be registered in an account that is not in the root domain of the forest. Example- Forest- Exa

Re: R: Multiple AD domains and MIT Kerberos

2007-03-02 Thread Jeffrey Altman
if the host name is host.example.com and the service principal is http/[EMAIL PROTECTED] then the domain realm entry for host.example.com should be SUBDOM.DOM2.EXAMPLE.COM Jeffrey Altman Secure Endpoints Inc. Eric Schwarz wrote: > Hello, > > We have a situation where we are trying to get AIX Ker

RE: R: Multiple AD domains and MIT Kerberos

2007-03-03 Thread Eric Schwarz
: R: Multiple AD domains and MIT Kerberos if the host name is host.example.com and the service principal is http/[EMAIL PROTECTED] then the domain realm entry for host.example.com should be SUBDOM.DOM2.EXAMPLE.COM Jeffrey Altman Secure Endpoints Inc. Eric Schwarz wrote: > Hello, > >

RE: R: Multiple AD domains and MIT Kerberos

2007-03-03 Thread Eric Schwarz
) -Original Message- From: Eric Schwarz Sent: Saturday, March 03, 2007 5:36 AM To: '[EMAIL PROTECTED]' Cc: kerberos@mit.edu Subject: RE: R: Multiple AD domains and MIT Kerberos Jeffrey, Thank you so much for replying! Q. Would the [domain_realm] entry look

Re: R: Multiple AD domains and MIT Kerberos

2007-03-05 Thread Douglas E. Engert
> email-[EMAIL PROTECTED] > hpsd- SERVER-WINSECURITY (WG2716) > WinSecurity Change Management (WG2811) > > > -Original Message- > From: Eric Schwarz > Sent: Saturday, March 03, 2007 5:36 AM > To: '[EM

RE: R: Multiple AD domains and MIT Kerberos

2007-03-07 Thread Eric Schwarz
- From: Douglas E. Engert [mailto:[EMAIL PROTECTED] Sent: Monday, March 05, 2007 10:27 AM To: Eric Schwarz Cc: [EMAIL PROTECTED]; kerberos@mit.edu Subject: Re: R: Multiple AD domains and MIT Kerberos Eric Schwarz wrote: > Jeffrey, > > After reading up a lot on this I would like t