Vista SP1 and AD trust to MIT 1.4.3+citi-referrals

[Kevin Coffman]

On Thu, Feb 28, 2008 at 2:01 PM, Phil Pishioneri <pgp at psu.edu> wrote:
> In testing Vista SP1 in our Windows AD Forest (in which account are
>  mapped to our MIT realm), I believe that we're seeing the same problem
>  that was reported on the Heimdal mailing list in October 2007; see the
>  thread
>
>  <http://www.stacken.kth.se/lists/heimdal-discuss/2007-10/msg00010.html>,
>  and also
>  <http://www.theexperienceblog.com/2007/10/14/vista-sp1-change-causes-kerberos-problems/>.
>
>  Anyone know if there's been a fix for this since 1.4.3 plus CITI
>  referrals patch, or if 1.6 is immune to the problem? Although there is a
>  circumvention for a Vista SP1 client (new registry key), a KDC-side fix
>  is preferable.
>
>  -Phil

There is no fix to our patch that I am aware of.  I have asked Love to
give me more information about the problem.

K.C.