Determining the Kerberos domain in HTTP
"Martin v. Löwis"
martin at v.loewis.de
Tue Jan 3 19:26:36 EST 2006
Douglas E. Engert wrote:
> This sounds like IE and sspi are using referrals:
>
> http://www.ietf.org/internet-drafts/draft-ietf-krb-wg-kerberos-referrals-06.txt
I see. I now think I understand what's happening: A.B.COM and B.COM
are distinct forests. So B.COM will not issue domain referrals for
A.B.COM, unless there is a forest trust (which there isn't either;
neither domain is on the Windows 2003 forest functional level).
Thanks everybody for the help.
Regards,
Martin
More information about the Kerberos
mailing list