[30470] in Kerberos
MIT Kerberos cross realm authentication with Windows Active Directory
daemon@ATHENA.MIT.EDU (Duffey, Blake A.)
Fri Nov 21 15:47:51 2008
Content-class: urn:content-classes:message
MIME-Version: 1.0
Date: Fri, 21 Nov 2008 15:46:48 -0500
Message-ID: <F82358BDED0DFC459343A65DB8082D21C19CD6@email1.mitretek.org>
From: "Duffey, Blake A." <Blake.Duffey@noblis.org>
To: <kerberos@mit.edu>
Content-Type: multipart/mixed; boundary="===============1132211889=="
Errors-To: kerberos-bounces@mit.edu
This is a multi-part message in MIME format.
--===============1132211889==
Content-class: urn:content-classes:message
Content-Type: multipart/signed; protocol="application/x-pkcs7-signature";
micalg=SHA1; boundary="----=_NextPart_000_0087_01C94BF0.5D43F9E0"
This is a multi-part message in MIME format.
------=_NextPart_000_0087_01C94BF0.5D43F9E0
Content-Type: text/plain;
charset="us-ascii"
Content-Transfer-Encoding: 7bit
I have encountered a peculiar problem and would like to know if anyone has
seen it (or can duplicate it) and has a work around.
I have a cross-realm trust between a Windows 2008 Active Directory and an
MIT Kerberos Realm. The resources (apache, sshd, postgresql) are in the MIT
realm and the users are in the AD (at the moment this setup cannot be
changed).
While my domain controller is Windows 2008, my current 'client' is a Windows
2003 server. When I boot the server and logon using a domain ID, the cross
realm works great. I log on with an AD account (which is mapped to a
Kerberos princ in the MIT realm) and connect using Kerberos-aware clients
(putty, Firefox, IE) to resources in the MIT realm. Doing a network
capture, I see my client send a request for the tgt to my domain controller,
I get the correct ticket which is then passed along, and all is well.
If I log off, and then log back on as the same user (or the screen locks,
which on Windows clears the Kerberos cache), the cross realm does NOT work.
(in fact, my network capture shows my client asking for
host/bobo.mit.realm@MIT.REALM rather than the tgt). I have replicated this
on different servers and on different AD domains. This is a standard
Windows 2003 server install, I have just used ksetup to set the KDC for the
MIT realm and implemented a registry hack (see below).
If I use a Windows 2008 server as my client, it works perfectly. The
'ksetup' program in Windows 2008 has a switch called 'AddHostToRealmMap'
which does what it sounds like. (I believe this acts like the krb5.conf
settings under the [domain_realm] section). This switch doesn't exist in
the Windows 2003 version of ksetup, but MS claims I can add the registry
keys thusly: http://technet.microsoft.com/en-us/library/cc738673.aspx
But it doesn't work after a log off and it doesn't work after a screen lock.
If I reboot the machine and log in, it all works again. I am baffled by
this behavior and, since I can't be the first person to try to implement
this scenario, would love to hear if anyone has any insight.
Thanks and I appreciate your time.
Blake
------=_NextPart_000_0087_01C94BF0.5D43F9E0
Content-Type: application/x-pkcs7-signature;
name="smime.p7s"
Content-Transfer-Encoding: base64
Content-Disposition: attachment;
filename="smime.p7s"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------=_NextPart_000_0087_01C94BF0.5D43F9E0--
--===============1132211889==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
--===============1132211889==--
