MIT Kerberos for Windows 2.1.x cred cache breaks Win2k service

Mike Frisch mfrisch at isurfer.ca
Thu Feb 28 12:48:05 EST 2002


On 26 Feb 2002 16:49:54 GMT, Jeffrey Altman
<jaltman at watsun.cc.columbia.edu> wrote:
>I'm not sure I understand the problem you are having.  Would you care
>to describe what you were doing with previous versions that no longer 
>works?

I was previously making MIT Kerberos calls on behalf of a client from a
Windows service (running as the SYSTEM user).  Obviously now this is
impossible with the recent modifications to the credentials cache.  I
had anticipated using Win32 impersonation, however this has been
disallowed as per the release notes.  I am still devising a feasible
workaround.

Mike.



More information about the Kerberos mailing list