>I've fine combed the 'Net for anything that can do this, >but can't find anything. > >Haven't anyone written a MSGINA replacement that allow >authentication against a MIT Kerberos KDC?
If you are using Windows 2000, you can use ksetup to configure authentication against a non-Windows KDC, with the proviso that users must have existing local or Active Directory accounts. In any case, a GINA is not the correct place to hook in support for additional authentication providers; it only deals with interactive, not network, authentication. Existing GINAs that create temporary local accounts for users at logon are a kludge at best. The correct abstraction is to write a Kerberos LSA provider, which is what Microsoft did with Windows 2000. A local or Active Directory account is required so that a token with the correct authorization information may be constructed at logon. -- Luke -- Luke Howard | PADL Software Pty Ltd | www.padl.com ________________________________________________ Kerberos mailing list [EMAIL PROTECTED] http://mailman.mit.edu/mailman/listinfo/kerberos
