[23482] in Kerberos
Re: KFW with NT4 domain
daemon@ATHENA.MIT.EDU (Franco Milicchio)
Fri Mar 4 11:40:46 2005
From: Franco Milicchio <milicchio@wisc.edu>
Date: Fri, 04 Mar 2005 09:02:51 -0600
Message-ID: <d09tbl$be4$1@news.doit.wisc.edu>
To: kerberos@mit.edu
Errors-To: kerberos-bounces@mit.edu
Jeffrey Altman wrote:
> Leash has the ability to extract the Kerberos 5 tickets obtained by
> Windows during the login process when the Windows domain controller is
> Active Directory. When the domain controller is NT4, there is no
> Kerberos 5 support available through Windows. Therefore, Leash cannot
> obtain Kerberos tickets from Windows.
One moment... I didn't say NT has kerberos like AD has, I asked if the
behavior will be the same for NT-domain users like it's now for local users.
So, matching user/password with k5 principal and afs pts entry, a user
will gain k5 ticket and token automatically, without prompts.
Users are from a nt-domain, not local.
> Leash will allow the user to obtain Kerberos 5 tickets for any user
> principal provided that the user knows the associated password. Leash
> will attempt to obtain AFS tokens if OpenAFS is installed.
Allow automatically or will present the leash interface asking for a
principal and password?
I'm just trying to understand before screwing up a windows client :)
--
Franco Milicchio <mailto:milicchio@wisc.edu>
No keyboard found. Press F1 to continue...
(Almost every BIOS available in this world... even yours!)
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
