Where are Kerberos configuration/credentials stored in a Windows ActiveDirectory environment?

[Actually davidchr]

Windows stores credential data within the LSASS process, which you can
query to some degree by calling LsaCallAuthenticationPackage (there
should be documentation on this in the MSDN).  

Configuration data is stored in a variety of places depending on what
you're after and not all of it is exposed to applications.  What kind of
data are you looking for? 

-Dave

---
This message may originate from an unmonitored alias ("davespam") for
spam-reduction purposes.  Use "davidchr" for individual replies.
This message is provided "AS IS" with no warranties, and confers no
rights.
Any opinions or policies stated within are my own and do not necessarily
constitute those of my employer.
This message originates in the State of Washington (USA), where
unsolicited commercial email is legally actionable (see
http://www.wa-state-resident.com).
Harvesting of this address for purposes of bulk email (including "spam")
is prohibited unless by my expressed prior request.  I retaliate
viciously against spammers and spam sites.
 

> -----Original Message-----
> From: kerberos-bounces at MIT.EDU 
> [mailto:kerberos-bounces at MIT.EDU] On Behalf Of Sleepy
> Sent: Wednesday, April 28, 2004 1:51 PM
> To: kerberos at MIT.EDU
> Subject: Where are Kerberos configuration/credentials stored 
> in a Windows ActiveDirectory environment?
> 
> I'm attempting to use Java's implementation of Kerberos in a Windows
> ActiveDirectory environment. I have discovered that it appears that
> Java and Windows each handle Kerberos configurations and credentials
> independently. For example, Java appears to store its credentials
> cache in 
> 
> c:\documents and settings\<username>\krb55cc_<username>
> 
> So, the Java klist appears to draw from this file. However, the
> Microsoft Resource Kit klist appears to draw from somewhere else. Does
> anyone know where? I can't seem to find it in the registry or
> anything.
> 
> Also, any locations of where Kerberos settings may be drawn from (eg -
> similar to how Java's kinit tool uses C:\WinNT\krb5.ini) in a Windows
> ActiveDirectory environment would be greatly appreciated. 
> 
> Thanks!
> 
> ________________________________________________
> Kerberos mailing list           Kerberos at mit.edu
> https://mailman.mit.edu/mailman/listinfo/kerberos
>