RE: interoperability Win2k/Linux

2002-06-10 Thread Paul B. Hill
Message- From: Derek T. Yarnell [mailto:[EMAIL PROTECTED]] Sent: Monday, June 10, 2002 6:22 PM To: Paul B. Hill Cc: Derek Yarnell; [EMAIL PROTECTED] Subject: Re: interoperability Win2k/Linux On Mon, Jun 10, 2002 at 05:45:47PM -0400, Paul B. Hill wrote: > This works well except in the case

Re: interoperability Win2k/Linux

2002-06-10 Thread Derek T. Yarnell
On Mon, Jun 10, 2002 at 05:45:47PM -0400, Paul B. Hill wrote: > This works well except in the case of Exchange. Exchange doesn't support > Kerberos, it is always using NTLM. If the users don't know their native > Windows password they won't be able to use Exchange. Is this true with Exchange 2000

RE: interoperability Win2k/Linux

2002-06-10 Thread David Lawler Christiansen (NT)
k email (spam and UCE) is expressly prohibited unless by my explicit prior request. I retaliate viciously against spammers and spam sites. > -Original Message- > From: Booker C. Bense [mailto:[EMAIL PROTECTED]] > Sent: Thursday, June 06, 2002 11:46 AM > To: francis

Re: interoperability Win2k/Linux

2002-06-10 Thread bbense+comp.protocols.kerberos.Jun.10.02
-BEGIN PGP SIGNED MESSAGE- In article <[EMAIL PROTECTED]>, Derek Yarnell <[EMAIL PROTECTED]> wrote: >> >> - The long and short of it, is that if you want to support W2k >> services, you HAVE to run a W2k Active Directory server. You don't >> have to keep user passwords in it, but you ha

RE: interoperability Win2k/Linux

2002-06-10 Thread Paul B. Hill
lto:[EMAIL PROTECTED]]On Behalf Of Derek Yarnell Sent: Monday, June 10, 2002 5:10 PM To: [EMAIL PROTECTED] Subject: Re: interoperability Win2k/Linux > > - The long and short of it, is that if you want to support W2k > services, you HAVE to run a W2k Active Directory server. You don't &

Re: interoperability Win2k/Linux

2002-06-10 Thread Derek Yarnell
> > - The long and short of it, is that if you want to support W2k > services, you HAVE to run a W2k Active Directory server. You don't > have to keep user passwords in it, but you have to run it. > So wait you are saying there is a way to pass through the krb5 auth to a MIT kdc? How can I do t

Re: interoperability Win2k/Linux

2002-06-06 Thread Sam Hartman
Alternatively, if you map accounts locally on all your servers and do not depend on domain logins or domain group memberships you can avoid the need for an AD server. Kerberos mailing list [EMAIL PROTECTED] http://mailman.mit.edu/mailman/

Re: interoperability Win2k/Linux

2002-06-06 Thread Booker C. Bense
On 6 Jun 2002, francis wrote: > Hi, > > MIT advice to make a bi-directional cross realm trust. > But, i want to know if these follow scenarios are possible and > what are the interoperabilities problems: > > win2k client --> MIT kdc --> win2k service - Only if the w2k service doesn't use embedde

interoperability Win2k/Linux

2002-06-06 Thread francis
Hi, MIT advice to make a bi-directional cross realm trust. But, i want to know if these follow scenarios are possible and what are the interoperabilities problems: win2k client --> MIT kdc --> win2k service win2k client --> MIT kdc --> linux service Linux client --> MIT kdc --> win2k service