Using Java client with Windows 2003 AD with mixed case PrincipalNames

Sam Hartman hartmans at MIT.EDU
Wed Dec 1 17:39:02 EST 2004


All these issues have been discussed on the ietf-krb-wg list although
never quite in the same place.

Java is wrong in how it handles preauth; the advice in my preauth
draft would be a better approach.

AD is stretching clarifications significantly in how it handles case
of principal names.  However it's much more usable than what other
implementations do.  There was a long and heated discussion between
Martin Rex and people at Microsoft over this issue.

--Sam



More information about the Kerberos mailing list