[29474] in Kerberos
Re: using UPN to auth
daemon@ATHENA.MIT.EDU (Terry)
Wed Mar 12 12:27:29 2008
Message-ID: <8ee061010803120926r700e5d10s37c5ca05321ce2e6@mail.gmail.com>
Date: Wed, 12 Mar 2008 11:26:41 -0500
From: Terry <td3201@gmail.com>
To: "Markus Moeller" <huaraz@moeller.plus.com>
In-Reply-To: <fr78bf$qvt$1@ger.gmane.org>
MIME-Version: 1.0
Content-Disposition: inline
Cc: kerberos@mit.edu
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: kerberos-bounces@mit.edu
I am not sure if this matters but the end result is to use
mod_auth_kerb to authenticate users. You are saying I need to
recompile it to use type 10 (enterprise name type)? I might be able
to figure that out. :)
On Tue, Mar 11, 2008 at 7:32 PM, Markus Moeller <huaraz@moeller.plus.com> wrote:
> You need a modified kinit which sets the principal type to 10 (enterprise
> name type). Windows will then use the UPN instead of the samaccountname to
> authenticate. (See attached sample mkinit.c)
>
> Markus.
>
> BTW If your client support client canonicalisation you can authenticate as
> jdoe@domain.com but get a ticket for samaccountname.
>
> "Terry" <td3201@gmail.com> wrote in message
> news:8ee061010803111146g3d5b36b2rd5e22be1d3961073@mail.gmail.com...
>
>
> > Hello,
> >
> > I am very new to this. I have a FQDN in AD set to domain.foo. The
> > UPN of a user is jdoe@domain.com. (note the difference between foo
> > and com).
> >
> > How can I authenticate with jdoe@domain.com? I am able to auth
> > correctly with the sAMAccountName.
> >
> > Thanks!
> > ________________________________________________
> > Kerberos mailing list Kerberos@mit.edu
> > https://mailman.mit.edu/mailman/listinfo/kerberos
> >
>
> ________________________________________________
> Kerberos mailing list Kerberos@mit.edu
> https://mailman.mit.edu/mailman/listinfo/kerberos
>
>
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
