Using Java client with Windows 2003 AD with mixed case PrincipalNames

Luke Howard lukeh at padl.com
Wed Dec 1 20:12:02 EST 2004


>AD is stretching clarifications significantly in how it handles case
>of principal names.  However it's much more usable than what other
>implementations do.  There was a long and heated discussion between
>Martin Rex and people at Microsoft over this issue.

If you are using a Windows 2000 KDC (there's a bug in 2003) and the
client principals do not have UF_USE_DES_KEY_ONLY set, then you could
try modifying the Java client to send the "canonicalize" KDC option.

-- Luke

--


More information about the Kerberos mailing list