Re: Kerberos "overlay" in mixed OS environment

2016-12-07 Thread Simo Sorce
On Wed, 2016-12-07 at 17:17 +, Nordgren, Bryce L -FS wrote: > > Use a sub-domain for at least on of the two realm and avoid yourself > a lot of trouble. > > > Ah. I don't control the network. And it sounds to me like what you're > saying is that there's more than "trouble". Windows is complet

RE: Kerberos "overlay" in mixed OS environment

2016-12-07 Thread Nordgren, Bryce L -FS
> Use a sub-domain for at least on of the two realm and avoid yourself a lot of > trouble. Ah. I don't control the network. And it sounds to me like what you're saying is that there's more than "trouble". Windows is completely unsupportable in this environment because it can't adapt, and I can

Re: Kerberos "overlay" in mixed OS environment

2016-12-07 Thread Robert Wehn
Hi Brice, What you plan works if one ofe the REALMs is a non Windows/AD Realm. For AD at least the DCs (aka Kerberos Servers) need to have the DNS fqdn match to the REALM they serve. dc1.mydomain.com should server the krb realm MYDOMAIN.COM and the ldap namespace dc=mydomain,dc=de. The (Windows)