KfW Integrated Logon

[Maurice Massar]

hi,

On 2004-10-29, Jeffrey Altman <jaltman2 at nyc.rr.com> wrote:
>> is it possible with KfW to do an "Integrated Logon" like OpenAFS does?
>> What I want to do, is logon to a samba3 Domain, and getting kerberos
>> tickets using the same username and password automatically.
>
> You need to configure Windows to obtain the Kerberos tickets for
> you at login time.  Then KFW will obtain the tickets from the Windows

I want to do a samba domain-logon, so I can not use a windows non-ms-kdc
logon, or?

> Logon Session.  At the present time there is no secure method by which
> a Network Provider can obtain Kerberos tickets for you via KFW and
> pass them into the Logon Session for use by your applications.

does that mean what openafs is optionally doing, can not be done secure?
Or do I have to wait until samba4 is ready with kerberos support?

cu
maurice