kerberos/spnego sso closer

Michael B Allen mba2000 at ioplex.com
Wed Sep 6 07:38:04 EDT 2006


On Tue, 5 Sep 2006 22:30:33 -0700 (PDT)
John User <johnuser755 at yahoo.com> wrote:

> 
> Maybe a step closer:
> when running ktpass used crypto type des-crc-md5
> There is now a session ticket avaiable to both IE and
> firefox. 

I don't really understand this since IE nor FF have knowledge of the
enctype until they actually try to get a ticket. It also shouldn't make
any difference what the enctype is. I suspect the client was in fact
trying to get a ticket but was failing and resetting the password /
regenerating the key resolved the problem.

Mike

-- 
Michael B Allen
PHP Active Directory SSO
http://www.ioplex.com/



More information about the Kerberos mailing list