Hello,
We have a situation where we are trying to get AIX Kerberos to interoperate
with Microsoft w2k3 AD 4-domain forest. The challenge is to get the krb5.conf
configuration to allow for the SPN to be registered in an account that is not
in the root domain of the forest. Example-
Forest-
Exa
if the host name is host.example.com and the service principal is
http/[EMAIL PROTECTED] then the domain realm
entry for host.example.com should be SUBDOM.DOM2.EXAMPLE.COM
Jeffrey Altman
Secure Endpoints Inc.
Eric Schwarz wrote:
> Hello,
>
> We have a situation where we are trying to get AIX Ker
: R: Multiple AD domains and MIT Kerberos
if the host name is host.example.com and the service principal is
http/[EMAIL PROTECTED] then the domain realm
entry for host.example.com should be SUBDOM.DOM2.EXAMPLE.COM
Jeffrey Altman
Secure Endpoints Inc.
Eric Schwarz wrote:
> Hello,
>
>
)
-Original Message-
From: Eric Schwarz
Sent: Saturday, March 03, 2007 5:36 AM
To: '[EMAIL PROTECTED]'
Cc: kerberos@mit.edu
Subject: RE: R: Multiple AD domains and MIT Kerberos
Jeffrey,
Thank you so much for replying!
Q. Would the [domain_realm] entry look
> email-[EMAIL PROTECTED]
> hpsd- SERVER-WINSECURITY (WG2716)
> WinSecurity Change Management (WG2811)
>
>
> -Original Message-
> From: Eric Schwarz
> Sent: Saturday, March 03, 2007 5:36 AM
> To: '[EM
-
From: Douglas E. Engert [mailto:[EMAIL PROTECTED]
Sent: Monday, March 05, 2007 10:27 AM
To: Eric Schwarz
Cc: [EMAIL PROTECTED]; kerberos@mit.edu
Subject: Re: R: Multiple AD domains and MIT Kerberos
Eric Schwarz wrote:
> Jeffrey,
>
> After reading up a lot on this I would like t