[22432] in Kerberos
RE: Replication of password base AD -> MIT
daemon@ATHENA.MIT.EDU (Digant Kasundra)
Fri Sep 10 18:35:57 2004
Message-ID: <CEE4E6ECB6C98C4281D09A17EC3DC0ED08C63D38@exchange.uta.edu>
From: Digant Kasundra <digant@uta.edu>
To: Tobias Schenk <schenk_remove_this_@physik.tu-berlin.de>, kerberos@mit.edu
Date: Fri, 10 Sep 2004 17:29:41 -0500
MIME-Version: 1.0
Content-Type: text/plain
Errors-To: kerberos-bounces@mit.edu
We're working on a patch for MIT Kerberos that will trap password change
events and send them to Microsoft AD and a password filter on the AD side
that will send password change events to the MIT KDC. This will effectively
keep passwords in sync. Send me an email in a month if you are interested.
> -----Original Message-----
> From: kerberos-bounces@MIT.EDU
> [mailto:kerberos-bounces@MIT.EDU] On Behalf Of Tobias Schenk
> Sent: Wednesday, September 08, 2004 5:11 PM
> To: kerberos@MIT.EDU
> Subject: Replication of password base AD -> MIT
>
>
> Hi,
>
> I have the following problem:
> I want to setup a win2003 domain controller using Kerberos.
> Also I have a linux machine which should offer many network
> services (SMTP, POP,...). These should also use Kerberos to
> make it convenient for the users.
> The drawback is that if the win box crashes, also the linux
> service become unavailable.
> I thought it would be best to run a KDC on linux also and
> have the password base synced. I know it contradicts somehow
> the idea of the Kerberos topology.Anyway I have read that
> Kerberos can push its password base to slave-KDCs but I have
> not found info on how to make windows push this. I fear by
> their 'special' implementation and AD they dont find it necessary.
> Is there something like a pull or replicate mechanism?
> Or is it just a stupid idea (as you see i am no krb professional) ?
>
> Thanks,
>
> Tobias
> ________________________________________________
> Kerberos mailing list Kerberos@mit.edu
> https://mailman.mit.edu/mailman/listinfo/kerberos
>
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
