w2k kerberos logon

[Luke Howard]

>trying to get to understand how the kerberos client generates the domain
>name to authenticate the user when they enter the downlevel NetBIOS name in
>the logon dialog box.

The client simply uses the NetBIOS name as the realm, and sets the
canonicalize flag; the AS-REP contains the DNS domain name in the
realm.

-- Luke
--
Luke Howard | PADL Software Pty Ltd | www.padl.com