Antwort: Re: Windows with MIT krb5 and OpenLDAP [Virus checked]

[denis.havlik@t-mobile.at]

>to a local account.  Or you can setup a cross-realm relationship
>between the MIT KDC and a Windows 2003 Server which will allow
>you to use the MIT KDC for authentication while providing access
>to Windows account profile data within the Windows Active Directory.

This is in fact what Microsoft recomends for the folks that have a non-MS 
Kerberos, and want to integrate AD with existing system. For Micrasoft it 
has the advantage of needing just as many MS servers as the pure Microsoft 
solution. .-)

Joke aside, another advantage is that it's possible to introduce central 
MIT Kerberos based authentication in a Windows-centric company without 
having to change the complete system.

My question is: how good does this approach work in the praxis?

thx
        Denis

--
T-Mobile Austria GmbH,
Information Technologies / Services
Knowledge Management & Process Automation

Dr. Denis Havlik,                                   eMail: 
denis.havlik at t-mobile.at
Rennweg 97-99, BT2E0304031        Phone: +43-1-79-585/6237 
A-1030 Vienna                                        Fax: 
+43-1-79-585/6584