[22973] in Kerberos
Re: Using Java client with Windows 2003 AD with mixed case
daemon@ATHENA.MIT.EDU (Luke Howard)
Wed Dec 1 20:13:22 2004
From: Luke Howard <lukeh@padl.com>
Message-Id: <200412020112.iB21C2kt042208@au.padl.com>
MIME-Version: 1.0
Content-Type: text/plain; charset=US-ASCII
To: hartmans@mit.edu
Date: Thu, 2 Dec 2004 12:12:02 +1100
cc: java-security@sun.com
cc: kerberos@mit.edu
cc: deengert@anl.gov
Reply-To: lukeh@padl.com
Errors-To: kerberos-bounces@mit.edu
>AD is stretching clarifications significantly in how it handles case
>of principal names. However it's much more usable than what other
>implementations do. There was a long and heated discussion between
>Martin Rex and people at Microsoft over this issue.
If you are using a Windows 2000 KDC (there's a bug in 2003) and the
client principals do not have UF_USE_DES_KEY_ONLY set, then you could
try modifying the Java client to send the "canonicalize" KDC option.
-- Luke
--
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
