Cross-realm trusts w/ MS Windows 2003

Douglas E. Engert deengert at anl.gov
Tue Aug 19 10:54:11 EDT 2003


Some more info on using MS kerberos with SecureCRT, where the user's KDC is W2K.

I can log in to a unix system running OpenSSH with GSSPAPI
and MIT Kereberos 1.2.8. But the forwarded ticket has some strange
etypes. The next step is to try it with Krb5-1.3.1 which I hope will
handle this better   
 
Ticket cache: FILE:/tmp/krb5cc_1999_xU2957
Default principal: user at ANL.GOV

Valid starting     Expires            Service principal
08/19/03 08:37:42  08/19/03 18:27:16  krbtgt/ANL.GOV at ANL.GOV
        renew until 08/26/03 08:27:16, Etype (skey, tkt): etype 65403, etype -133 



-- 

 Douglas E. Engert  <DEEngert at anl.gov>
 Argonne National Laboratory
 9700 South Cass Avenue
 Argonne, Illinois  60439 
 (630) 252-5444


More information about the krbdev mailing list