[33448] in Kerberos
Re: separate kdc to authenticate a single user
daemon@ATHENA.MIT.EDU (Richard E. Silverman)
Tue Jun 7 11:19:11 2011
From: res@qoxp.net (Richard E. Silverman)
Message-ID: <m2y61d3klm.fsf@darwin.oankali.net>
MIME-Version: 1.0
X-Complaints-To: abuse@thundernews.com
Date: Tue, 07 Jun 2011 08:13:41 -0400
To: kerberos@mit.edu
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: kerberos-bounces@mit.edu
peter sands <peter_sands@techemail.com> writes:
> Hi,
>
> Currently have kerberos running ( mit). All OK. but just found out
> that a web service currently running of one of our clients wants to
> use kerberos to authenticated against their own KDC server and not our
> default one.
>
> Do I just put in another entry in the realms section for their kdc, or
> do I need to
> setup cross-realm .
>
> Not to sure what to do
>
> Thanks
> Pete
If your client is going to use their own realm, you only need
cross-realm trust if you want principals in one realm to be able to
authenticate to services in the other.
--
Richard Silverman
res@qoxp.net
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
