[24536] in Kerberos
Re: Problems trying to authenticate Unix users via Active Directory
daemon@ATHENA.MIT.EDU (Wyllys Ingersoll)
Mon Aug 29 10:12:17 2005
Message-ID: <43131746.7070708@sun.com>
Date: Mon, 29 Aug 2005 10:10:14 -0400
From: Wyllys Ingersoll <wyllys.ingersoll@sun.com>
MIME-Version: 1.0
To: Bill Smith <bill.smith@jhuapl.edu>
In-Reply-To: <dekkvd$t8$1@aplcore.jhuapl.edu>
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit
cc: kerberos@mit.edu
Errors-To: kerberos-bounces@mit.edu
Bill Smith wrote:
>>From what I've found, it seems to be an issue with the user being in too
>many AD groups, the Windows KDC wanting to use TCP rather than UDP, and the
>MIT version not supporting it. What I'm not certain on is whether is the
>version shipped with Solaris 9 is MIT-based or something proprietary to
>Solaris. I've found some mention of setting a registry key on the Windows ]
>
>
The SEAM packages in Solaris are based on MIT, though they are not
identical, there are
some minor differences. Solaris 9 SEAM does not have TCP support,
which is needed
to work with Windows 2003 server. There are workarounds, as others
have pointed out.
>
>At this point, we're still having the problem with no resolution. Has
>anyone else encountered this issue? If so, is there a patch from SUN to
>address it or did you have to do something else? Would appreciate any
>insight into this problem
>
>
I'm not sure if we have a patch for Solaris 9, but I do know that
Solaris 10 has TCP support
and does not suffer the same problems as the Solaris 8 and 9 versions.
-Wyllys
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
