logon to windows machine which joins a win domain using credential from MIT KDC

[Lara Adianto]

Hello everybody,

I've been able to setup windows machine which belongs
to workgroup to authenticate to MIT KDC.
In that case, the windows machine as well as the user
are members of external realm (MIT realm)

Now, I wonder whether it's possible for a user to
login into windows machine which joins a windows
domain using his/her credential in MIT realm.
If yes, what are the changes needed in the
configuration (ksetup, trust relationship, etc) ?
In this case, in the win logon box, should I choose
the domain to be the MIT realm or windows domain ? and
should the windows machine be a member of windows AD
or external MIT realm ?

I believe that the article step by step krb5
interoperability only explains about how to setup
windows machine which belongs to workgroup to
authenticate to external MIT realm.

I'll do experiments on my part, but I will appreciate
any hints that can save my time

thanks for any input,
lara

=====
------------------------------------------------------------------------------------ 
La vie, voyez-vous, ca n'est jamais si bon ni si mauvais qu'on croit
                                                                        - Guy de Maupassant -
------------------------------------------------------------------------------------

__________________________________________________
Do You Yahoo!?
Tired of spam?  Yahoo! Mail has the best spam protection around 
http://mail.yahoo.com