[33538] in Kerberos
Forcing ticket name for host on windows
daemon@ATHENA.MIT.EDU (garnett)
Wed Jul 6 13:23:50 2011
From: garnett <nicolas.greneche@gmail.com>
Date: Wed, 6 Jul 2011 05:21:28 -0700 (PDT)
Message-ID: <774bd09d-654a-47a5-944f-7c1e12b31d19@d7g2000vbv.googlegroups.com>
Mime-Version: 1.0
X-Complaints-To: groups-abuse@google.com
Complaints-To: groups-abuse@google.com
To: kerberos@mit.edu
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: kerberos-bounces@mit.edu
Hi,
When you enable kerberos authentication against a UNIX KDC, you must
have a principal host/fqdn@DEFAULT_REALM in the KDC.
I would like to keep on using DEFAULT_REALM as the default realm
EXPECT for my host principals. Those host principals will be stored in
another realm (ie HOST.DEFAULT_REALM) with a cross realm between
DEFAULT_REALM and HOST.DEFAULT_REALM ?
Do you know how to force windows ask for host/fqdn@HOST.DEFAULT_REALM
(and no longer host/fqdn@DEFAULT_REALM) with keeping DEFAULT_REALM as
the default realm ?
Thanks,
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
