Authentication Indicators and Cross Realm Trust

Greg Hudson ghudson at mit.edu
Fri Oct 7 18:30:19 EDT 2022


On 9/30/22 16:06, Machin, Glenn Douglas via Kerberos wrote:
> Can someone tell me if a TGT containing an authentication indicator will work over to a service principal in another realm which has a cross realm trust relationship?

Authentication indicators are currently only accepted within the same 
realm; cross-realm service ticket requests do not preserve the 
indicators from the cross-realm TGT.


More information about the Kerberos mailing list