mit->windows cross realm auth

Dave Botsch botsch at cnf.cornell.edu
Fri Nov 3 13:30:03 EST 2006


A quick question regarding the subj and referrals...

when a computer is not in the domain, to do file sharing where one auths
initially to a MIT kerberos realm, the windows client will try and do a
kerberos referral to get the service ticket for the file sharing.

What about when a computer IS in the windows domain? Are referrals still
required in this case or will the computer use its client configuration to talk
to the correct kerberos server (the AD kerb server) just as it does during the
actual login?

thanks.

-- 
********************************
David William Botsch
Programmer/Analyst
CNF Computing
botsch at cnf.cornell.edu
********************************



More information about the Kerberos mailing list