RE: Kerberos on the web

[David Lawler Christiansen (NT)]

Title: Message

No offense, but this article is old news, speculative and misleading in places.  It has nothing to do with MS's use of Kerberos in Passport (which is what Ice is asking, I think), and only questions whether our Kerberos implementation will interoperate with any other implementation.  The simple question I must ask in this case is, "have you TRIED it?"

 

My experience is that everyone who insists that we don't interoperate is either speculating, mistaken, or outright lying.  We interop just fine, either as a client, a server, or as a KDC, in single and multiple-realm scenarios.  If you don't believe me, hunt down someone with Win2K and/or WinXP, or get on the beta program for .NET server.  Run your own tests and draw your own conclusions-- don't just believe the spin. 

 

Thanks!

-Dave

 

-----Original Message-----
From: Zafar Baig [mailto:[EMAIL PROTECTED]]
Sent: Thursday, January 17, 2002 11:27 AM
To: David Lawler Christiansen (NT); hot ice; [EMAIL PROTECTED]
Subject: RE: Kerberos on the web

http://www.infoworld.com/articles/en/xml/00/04/28/000428enkerpub.xml

Please read this article carefully to understand interoperability issues.

Excerpts from this article....

"....Microsoft's PAC locks users into its version of Kerberos."

-----Original Message-----
From: David Lawler Christiansen (NT)
[mailto:[EMAIL PROTECTED]]
Sent: Thursday, January 17, 2002 1:47 PM
To: hot ice; [EMAIL PROTECTED]
Subject: RE: Kerberos on the web

Not trolling, but where exactly did you hear that we were doing it "all
our way", and what does that mean? 

Thanks!
-Dave

> -----Original Message-----
> From: hot ice [mailto:[EMAIL PROTECTED]]
> Sent: Thursday, January 17, 2002 10:00 AM
> To: [EMAIL PROTECTED]
> Subject: Kerberos on the web
>
>
> Are there any commercially available kerberos-based
> authentication products for the web? I know Microsoft is
> doing something with Passport - but that's still all fuzzy
> and they are doing it in typical MS-fashion doing it all
> their way, or so I hear.
>
> Any suggestions or recommendations on products that offer
> website authentication - username/password, smartcard and a
> combination..?
>
> TIA
>