Kerberos MIT - Windows clients

[Dieter Schicker]

Dieter Schicker wrote:
> Hi,
> 
> I have a LDAP/GSSAPI/Kerberos system up and running. I have 2 questions:
> 
> 1. In the moment this system does only authentication. But what I want 
> is that "somewhere in this system" I can define to which of our servers 
> the specific user has access. Clearly, I need information about how to 
> do the authorization.
> 
> 2. Last night, I fiddled around with authenticating windows clients to 
> kerberos. I used the information in 
> http://sial.org/howto/kerberos/windows/. Well, the authorization works, 
Err. Of course that should read "authentication". Sorry
> but after that Windows does not "know" what to do with this user. Are 
> there any tools out there that do that job (like creating a volatile 
> user and giving him some default rights)?
> 
> Any ideas?
> 
> Many thanks in advance
> Didi