>[Question 2. Is there a chance GSSAPI on UNIX client and SSPI on Windows server 
>interoperate, with reasonable
>amount of changes?] 

Yes.

>[Question 3. What exactly does Kerberos do in the server?  If Kerberos is used only 
>for initial authentication,
>then all I need to do is PKINIT in the filesystem on UNIX, right?  Or, does Kerberos 
>actually check a ticket per
>each message, and even more, encrypt the data transferred between the client and the 
>server?  If so, what exactly
>do I have to do?  Encrypt packets with Kerberos functions?] 

By default, Kerberos is used for SMB authentication only.

-- Luke

--
Luke Howard | PADL Software Pty Ltd | www.padl.com

Reply via email to