Re: How does IE handle Kerberos authentication??

2004-07-09 Thread Markus Moeller
Keshav, Windows determines the kdc vi dns srv records. You can find some details below. http://www.mcmcse.com/win2k/guides/kerberos.shtml http://www.ietf.org/rfc/rfc2782.txt

Re: Performance testing Kerberos

2004-07-09 Thread Henry B. Hotz
We benchmarked significantly more than 50,000 authentications/hour against a Sun Ultra-1 running Solaris 8 and Heimdal 0.6.1. The database contained about 25,000 principals at the time. Does that help? I have no idea if MIT or Solaris 9 would be faster or slower. There's a long history

kerberos - proxy

2004-07-09 Thread Carretti Enrico
Hi all, I'm interested in using kerberos to authenticate clients requiring services to my proxy (i've configured Apache to run as aforward proxy); can anyone suggests some ways to do this type of auth?? Thanks all in advance Enrico - This

RE: kerberos - proxy

2004-07-09 Thread Tim Alsop
Enrico, We have a product which is designed to use Kerberos with Apache (1.3 or 2.0) when it is configured as a proxy. The regular SPNEGO Kerberos solution available for Apache, IE, Mozilla etc. will not work with proxy servers. Please let me know if you are interested and I can send you more

kerberos - proxy

2004-07-09 Thread Carretti Enrico
We have a product which is designed to use Kerberos with Apache (1.3 or 2.0) when it is configured as a proxy. The regular SPNEGO Kerberos solution available for Apache, IE, Mozilla etc. will not work with proxy servers. Please let me know if you are interested and I can send you more

RE: kerberos - proxy

2004-07-09 Thread Tim Alsop
Enrico, I suggest we continue this discussion offline rather than via [EMAIL PROTECTED] Thanks, Tim. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Carretti Enrico Sent: 09 July 2004 11:16 To: [EMAIL PROTECTED] Subject: kerberos - proxy We have a

Re: How does IE handle Kerberos authentication??

2004-07-09 Thread Pitrich, Karl
On Thu, 2004-07-08 at 23:39, Gerald (Jerry) Carter wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Keshav Prasad wrote: | Hi, | | I am developing a client which does kerberos authentication to a | kerberos enabled server. Can anyone please explain how actually | Internet

Re: KDC reachable API or KDC no-op proto transaction?

2004-07-09 Thread Jeffrey Altman
The only thing you can do is attempt to perform a probe via a TGS_REQ. I suggest you use a principal name which indicates the purpose of the query and the product. swbell wrote: I am working on a product feature that helps the user diagnose problems when communicating with Active Directory.