Lars Schimmer wrote: > Jeffrey Altman schrieb: > | Do you have a cross realm trust configured between AD and the MIT KDC? > > How should I do this? Both realm are the same. > I mean: first I setup the krb5 realm for our network, after that the AD. > I thought it would be easy, just to use our DNS entry, because it´s easy > and the same for Win and Linux machines.
I'm not even going to read the rest of your e-mail. The Active Directory realm and the MIT realm cannot be the same. They do not share the same database or the same keys. They are separate realms and must have separate names. Jeffrey Altman
begin:vcard fn:Jeffrey Altman n:Altman;Jeffrey org:Secure Endpoints Inc. adr:;;255 W 94TH ST PHB;NEW YORK;NY;10025;United States email;internet:[EMAIL PROTECTED] title:President tel;work:+1 212 769-9018 x-mozilla-html:TRUE url:http://www.secure-endpoints.com version:2.1 end:vcard
smime.p7s
Description: S/MIME Cryptographic Signature
