RE: cross realm trusts

2015-02-26 Thread Paul B. Henson
> From: Paul Henson > Sent: Thursday, February 05, 2015 2:59 PM > > Both realms will have exactly the same set of users. Are these the only two > steps needed to allow a principal u...@csupomona.edu to directly access > services in the CPP.EDU realm transparently? Or is there something else I > ne

Re: cross realm trusts

2015-02-06 Thread Rick van Rein
Hi Paul, This looks pretty complete to me. I haven’t done this sort of thing yet but I also figured it out like you did. Would be great to hear your experiences on this list. -Rick Kerberos mailing list Kerberos@mit.edu https://mailman

Re: cross realm trusts ..

2013-11-30 Thread Dennis Davis
On Fri, 29 Nov 2013, Matt Bryant wrote: > From: Matt Bryant > To: undisclosed-recipients: ; > Cc: kerberos@mit.edu > Date: Thu, 28 Nov 2013 20:36:03 > Subject: Re: cross realm trusts .. > > Have done that and yes can see all of those tickets mine, the > TGT for

Re: cross realm trusts ..

2013-11-28 Thread Matt Bryant
Matt B. On 29/11/13 07:29, Dennis Davis wrote: > On Fri, 29 Nov 2013, Matt Bryant wrote: > >> From: Matt Bryant >> To: undisclosed-recipients: ; >> Cc: kerberos@mit.edu >> Date: Thu, 28 Nov 2013 20:36:03 >> Subject: Re: cross realm trusts .. >> >

Re: cross realm trusts ..

2013-11-28 Thread Dennis Davis
On Fri, 29 Nov 2013, Matt Bryant wrote: > From: Matt Bryant > To: undisclosed-recipients: ; > Cc: kerberos@mit.edu > Date: Thu, 28 Nov 2013 20:36:03 > Subject: Re: cross realm trusts .. > > Have done that and yes can see all of those tickets mine, the > TGT for

Re: cross realm trusts ..

2013-11-28 Thread Matt Bryant
Simo, Have done that and yes can see all of those tickets mine, the TGT for cross realm auth and the host ticket in the other realm .. Now at this point got to say the old realm/kdc is on el4 and of course th eipa is on el6 is there any reason the version disparity 1.3 v 1.10 is causing is

Re: cross realm trusts ..

2013-11-28 Thread Simo Sorce
On Thu, 2013-11-28 at 15:09 +1000, Matt Bryant wrote: > All, > > Having an issue creating a cross realm trust between freeipa and a > legacy krb5 realm. Have added the relevant one way trust principles to > both KDCs and configured up and can see request being made to KDC but > when trying to a

RE: Cross realm Trusts

2001-10-08 Thread ARINDAM LAHA
L PROTECTED] Subject: RE: Cross realm Trusts All our W2k clients are members of the W2k domain. We don't support kerberos interoperability for stand-alone W2k workstations, so can't really comment on how this works. Please refer future questions to the [EMAIL PROTECTED] li