Determining the Kerberos domain in HTTP

"Martin v. Löwis" martin at v.loewis.de
Tue Jan 3 19:26:36 EST 2006


Douglas E. Engert wrote:
> This sounds like IE and sspi are using referrals:
> 
> http://www.ietf.org/internet-drafts/draft-ietf-krb-wg-kerberos-referrals-06.txt

I see. I now think I understand what's happening: A.B.COM and B.COM
are distinct forests. So B.COM will not issue domain referrals for
A.B.COM, unless there is a forest trust (which there isn't either;
neither domain is on the Windows 2003 forest functional level).

Thanks everybody for the help.

Regards,
Martin



More information about the Kerberos mailing list