interoperability

Actually davidchr davespam at microsoft.com
Fri Aug 2 20:28:30 EDT 2002


[this message originates from an unmonitored alias]

> I have looked at the step by step guide for interoperability 
> on the microsoft support web page nad lets just say that it 
> is not step by step.

Could you elaborate?  Are there steps missing?

> Moreover, I would like to create 
> transitive trusts between an mit kerberos and active 
> directory does any one have a tru step by step

When Realm Trusts are created, they are by default non-transitive.
Using the MMC Domains And Trusts snapin, the trust may be converted to a
transitive trust.

Locating the trust transitivity UI should go something like this (from
memory-- I don't have a Win2K DC sitting in front of me, so you may have
to wing it a bit):

1. Launch the MMC Domains And Trusts snapin on the Win2000 DC.  
2. Select your own domain
3. click the Trusts tab
4. select the MIT Trust
5. click Properties
6. There is a radio button near the bottom of the screen describing the
trust as Non-Transitive.  To make it Transitive, select the "Transitive"
setting.
7. click "ok"
8. click "ok"

The trust is now transitive.

-----
This message or posting is provided "AS IS" with no warranties, and
confers no rights.
Any opinions or policies stated within are my own and do not necessarily
constitute those of my employer.
I reside in Washington, USA, where Title 19 declares that sending me
Unsolicited Commercial Email can result in a $500 fine.
Harvesting of this address for purposes of bulk email (spam and UCE) is
expressly prohibited unless by my explicit prior request.  I retaliate
viciously against spammers and spam sites.

> -----Original Message-----
> From: Josef Allen [mailto:josallen at cs.fsu.edu] 
> Sent: Sunday, July 28, 2002 2:16 PM
> To: kerberos at mit.edu
> Subject: interoperability



More information about the Kerberos mailing list