Using Java client with Windows 2003 AD with mixed case PrincipalNames
Sam Hartman
hartmans at MIT.EDU
Wed Dec 1 17:39:02 EST 2004
All these issues have been discussed on the ietf-krb-wg list although
never quite in the same place.
Java is wrong in how it handles preauth; the advice in my preauth
draft would be a better approach.
AD is stretching clarifications significantly in how it handles case
of principal names. However it's much more usable than what other
implementations do. There was a long and heated discussion between
Martin Rex and people at Microsoft over this issue.
--Sam
More information about the Kerberos
mailing list