Kerberos multi domain

2010-01-01 Thread BOUCHER, Flavien
Hi, I need to setup kerberos for six distinct domain, there is no trust relationship between each domain. When I setup one domain by one, it's working. After testing each domain one by one, I merge the keytab file, and change the krb5.conf file: [libdefaults] defau

Re: Kerberos multi domain - Update

2010-01-03 Thread BOUCHER, Flavien
..@boyle> Content-Type: text/plain; charset="UTF-8" As far as I know, MIT kerberos can run multiple KDC's from the same machine, but each realm needs to have it's own IP or set of ports. On Fri, 2010-01-01 at 13:19 +0100, BOUCHER, Flavien wrote: > Hi, > >

RE: Kerberos multi domain - Update

2010-01-03 Thread BOUCHER, Flavien
: java.lang.NegativeArraySizeException incompatible with com.ibm.security.krb5.KrbException Is it an issue with my keytab file ? Regards. Flavien. -Message d'origine- De : Tim Alsop [mailto:tim.al...@cybersafe.com] Envoyé : dimanche 3 janvier 2010 11:24 À : BOUCHER, Flavien; kerberos@mit.edu Objet

Define SPN for multi domain

2010-01-04 Thread BOUCHER, Flavien
value of myserver.ad.net ? because when I will merge the key file I will have all the entry with HTTP/myserver.ad.net. Thanks for your help Regards. Flavien. -Message d'origine- De : Tim Alsop [mailto:tim.al...@cybersafe.com] Envoyé : dimanche 3 janvier 2010 12:27 À : BOUCHER, Fl

Cross realm authentication

2010-01-05 Thread BOUCHER, Flavien
Hi, I have some question about CROSS REALM authentication. I have two domains: TEST.COM and TEST2.COM These two domain use Windows server 2003, and there is a trust relationship two way between them. How could I setup a CROSS realm domain authentication ? Where should I setup a ktpass ? Where s