On Wed, Mar 13, 2002 at 10:08:48AM -0600, Steve Langasek wrote: > The part that isn't interoperable is the authorization data (group > membership listings) that MS chooses to pack inside the Kerberos ticket. > Even though this information is readily available from the LDAP server, > Win2K servers will never look there -- they'll only accept this info if > it comes in the Kerberos ticket.
And the structure of that data is now freely available. (It was always available, but new licensing now makes it usable.) That's a sure sign they will not be using it much longer. /fc - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
