Sun/MIT <-> Heimdal version compatibility issue?

2008-02-19 Thread Brian Thompson
Ok, this one has me a bit stumped... We have a functioning production kerberos environment that I'm trying to add a Solaris 11 (beta 79) client to. The kdc in my immediate realm where the host principals are located is a Solaris 9 host, and we have several working Solaris 10 client machines with

Re: Sun/MIT <-> Heimdal version compatibility issue?

2008-03-08 Thread Brian Thompson
Brian Thompson wrote: > > Ok, this one has me a bit stumped... > > We have a functioning production kerberos environment > that I'm trying to add a Solaris 11 (beta 79) client to. > > The kdc in my immediate realm where the host principals > are located is a Solari

Re: Open LDAP VS Kerberos : help needed

2008-05-22 Thread Brian Thompson
Ken Raeburn wrote: >On May 22, 2008, at 07:18, Anshuman Hazarika wrote: > > >>I now know that we can make kerberos use openldap as its data store >>backend, but only with heimdal as our kdc, not mit kerberos. >> >> > >Why do you think MIT Kerberos can't do that? > >Our current release ha

w2k client login to kerberos realm

2002-11-10 Thread Brian Thompson
Hi all, I'm having a problem logging into a non-windows kerberos realm from a w2k workstation. The same realm username/password works fine on the AD server due to a trust and the w2k workstation can log in using either a local account or an AD domain account. The non-windows realm is on the domain

Re: w2k client login to kerberos realm

2002-11-11 Thread Brian Thompson
"Tony Hoyle" <[EMAIL PROTECTED]> wrote in message news:<[EMAIL PROTECTED]>... > On Sun, 10 Nov 2002 13:36:39 +, Brian Thompson wrote: > > > username. If I delete the local account it > > doesn't work. There is an account in the AD > > se

Re: w2k client login to kerberos realm

2002-11-11 Thread Brian Thompson
[EMAIL PROTECTED] (Sam Hartman) wrote in message news:<[EMAIL PROTECTED]>... > > "Tony" == Tony Hoyle <[EMAIL PROTECTED]> writes: > > Tony> In any case it would be the KDC that would have to pass the > Tony> AD authentication information - maybe he was referring to > Tony> the pat

Re: w2k client login to kerberos realm

2002-11-12 Thread Brian Thompson
[EMAIL PROTECTED] wrote in message news:<[EMAIL PROTECTED]>... > > > Impirical evidence suggests you're giving an incomplete answer here. > > > I have a W2K box on my desk for which I log into an MIT account which > > > is mapped by the domain to a domain account. No local account exists. > > >

Re: w2k client login to kerberos realm

2002-11-13 Thread Brian Thompson
yer. > I reside in Washington, USA, where Title 19 declares that sending me > Unsolicited Commercial Email can result in a $500 fine. > Harvesting of this address for purposes of bulk email (spam and UCE) is > expressly prohibited unless by my explicit prior request. I retaliate >