[32600] in Kerberos
Re: problem with the cross-realm, any help?
daemon@ATHENA.MIT.EDU (Fabrice Bacchella)
Wed Aug 25 08:20:32 2010
Mime-Version: 1.0 (Apple Message framework v1081)
From: Fabrice Bacchella <fbacchella@spamcop.net>
In-Reply-To: <AANLkTim1ReyKGXPsLu0et4XS0FZtPy8m11R5HkD97HVJ@mail.gmail.com>
Date: Wed, 25 Aug 2010 14:20:26 +0200
Message-Id: <893B44F9-A32C-4DD3-BE85-BBE35E511B74@spamcop.net>
To: c f <claudiawhf@gmail.com>
Cc: "kerberos@mit.edu" <kerberos@mit.edu>
Content-Type: text/plain; charset="iso-8859-1"
Errors-To: kerberos-bounces@mit.edu
Content-Transfer-Encoding: 8bit
Le 25 août 2010 à 11:46, c f a écrit :
>
> *Yes I linked every AD user to a Mit Keberos principle manually, by the
> "name mapping" settings in AD. I think that's what you mean
> altSecurityIdentities.( I'm still new in this domain )
>
You have a realm A on AD, a realm B on MIT. Peoples connect on machines on realm B. But can't they try to be authenticated with token from realm A anyway ?
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
