Using Java client with Windows 2003 AD with mixed case PrincipalNames
Luke Howard
lukeh at padl.com
Wed Dec 1 20:12:02 EST 2004
>AD is stretching clarifications significantly in how it handles case
>of principal names. However it's much more usable than what other
>implementations do. There was a long and heated discussion between
>Martin Rex and people at Microsoft over this issue.
If you are using a Windows 2000 KDC (there's a bug in 2003) and the
client principals do not have UF_USE_DES_KEY_ONLY set, then you could
try modifying the Java client to send the "canonicalize" KDC option.
-- Luke
--
More information about the Kerberos
mailing list