Hi all, I took a little step backward today. First I tried to acces a Debian telnet service with a WinXP client, and a Windows 2003 server KDC. This was no problem (the client is a member of the 2003 domain).
The next step was to authenticate on a MIT KDC with the WinXP client. The WinXP client needs the autenticate on the KDC. This first failed for the same reason as I described in the first post here (the KDC does receive the request (AS and TGS) but the the WinXP authentication did fail. Then I started to read again in O'reilly's boek, and saw that there is more involved in getting a WinXP client to talk to a MIT KDC. I needed to use ksetup: ksetup /setdomain TEST2.NL ksetup /addkdc TEST2.NL kdc.test2.nl ksetup /addkpassword TEST2.NL ksetup /setmatchpassword winxp.test2.nl <password> After did I was able to use Kerberos on the WinXP box (and thus use MIT Kerberos).. I never took those stepd before. Do I need to execute any of these commands on the 2003 server to make cross-realm auth possible? I am a little confused about this at the moment. Thanks, Bart ________________________________________________ Kerberos mailing list [EMAIL PROTECTED] https://mailman.mit.edu/mailman/listinfo/kerberos
