[33497] in Kerberos
Re: cross-realm with windows 2k3 ad
daemon@ATHENA.MIT.EDU (Mark Davies)
Sun Jun 19 21:55:56 2011
From: Mark Davies <mark@ecs.vuw.ac.nz>
To: "Douglas E. Engert" <deengert@anl.gov>
Date: Mon, 20 Jun 2011 13:55:42 +1200
In-Reply-To: <4DFE98C6.4020003@anl.gov>
MIME-Version: 1.0
Message-Id: <201106201355.42463.mark@ecs.vuw.ac.nz>
Cc: kerberos@mit.edu
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: kerberos-bounces@mit.edu
On Mon, 20 Jun 2011, Douglas E. Engert wrote:
> > How does one check in AD? and change it if it is?
>
> Check the userAccountControl attribute of the cross realm TGT
> look for USE_DES_KEY_ONLY = 2097152, i.e. 0x200000
> http://support.microsoft.com/kb/305144
But how do you find the cross realm TGT object in something that will
let you look at userAccountControl? I don't have direct access to
the AD so need to tell the admins there where to go and what to
change.
cheers
mark
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
