Re: cross-realm authentication problem

2009-05-30 Thread Bjørn Tore Sund
Christopher D. Clausen wrote: Bjørn Tore Sund bjorn.s...@it.uib.no wrote: I'd like to thank Douglas Engert, Christopher Clausen and Guillaume Rosse for the help with this matter. Netdom.exe was indeed the answer, and as I was pestering our main AD honcho on the matter he started to remember

Re: cross-realm authentication problem

2009-05-29 Thread Bjoern Tore Sund
Douglas E. Engert wrote: Bjoern Tore Sund wrote: I am trying to get cross-realm authentication to work between AD and our MIT Kerberos realm. Windows client are in KLIENT.UIB.NO, Windows user accounts are in UIB.NO, Unix/Linux machines and accounts are in UNIX.UIB.NO. User names in

Re: cross-realm authentication problem

2009-05-29 Thread Bjørn Tore Sund
I'd like to thank Douglas Engert, Christopher Clausen and Guillaume Rosse for the help with this matter. Netdom.exe was indeed the answer, and as I was pestering our main AD honcho on the matter he started to remember (I still don't...) that I'd pulled up that command to him before - and the

Re: cross-realm authentication problem

2009-05-29 Thread Christopher D. Clausen
Bjørn Tore Sund bjorn.s...@it.uib.no wrote: I'd like to thank Douglas Engert, Christopher Clausen and Guillaume Rosse for the help with this matter. Netdom.exe was indeed the answer, and as I was pestering our main AD honcho on the matter he started to remember (I still don't...) that I'd

cross-realm authentication problem

2009-05-28 Thread Bjoern Tore Sund
I am trying to get cross-realm authentication to work between AD and our MIT Kerberos realm. Windows client are in KLIENT.UIB.NO, Windows user accounts are in UIB.NO, Unix/Linux machines and accounts are in UNIX.UIB.NO. User names in UIB.NO and UNIX.UIB.NO are the same. KLIENT.UIB.NO and

Re: cross-realm authentication problem

2009-05-28 Thread Douglas E. Engert
Bjoern Tore Sund wrote: I am trying to get cross-realm authentication to work between AD and our MIT Kerberos realm. Windows client are in KLIENT.UIB.NO, Windows user accounts are in UIB.NO, Unix/Linux machines and accounts are in UNIX.UIB.NO. User names in UIB.NO and UNIX.UIB.NO are

Re: cross-realm authentication problem

2009-05-28 Thread Guillaume Rousse
Douglas E. Engert a écrit : krb5-1.6.1 supports RC4 and DES (plus others). Windows 2003 only supports RC4 and DES. krb5-1.3.1 only supports DES. Windows 2003 support RC4 starting from SP2 only, and still uses DES for cross-realm relationship by default. You have to install the Windows