[14447] in Kerberos
Kerb4 Kerb5 and Win2K
daemon@ATHENA.MIT.EDU (Scott Sinclair)
Mon May 14 01:59:11 2001
From: "Scott Sinclair" <scott@uq.edu.au>
Date: Mon, 14 May 2001 15:38:47 +1000
Message-ID: <9dnr1l$nco$1@bunyip.cc.uq.edu.au>
To: kerberos@MIT.EDU
We are currently testing SSO under Kerb5 and have the following problem:
Environment:
Windows 2000 Professional Clients
Production Kerberos 4 under Solaris
Development Kerberos 5 under Solaris
Problem:
If user accounts are exported from the K4 DB to the K5 DB, Windows 2000
cannot authenticate against it. If the account's password is manually set
(using kadmin) on the K5 DB after the merge, Windows 2000 clients can
cross-realm authenticate no problem.
We are suspecting that somehow, the passwords are being screwed up in the
export/import process but can see where.
Any help appreciated...
-----------------------------------------------------
Scott Sinclair BSc (InfTech & CogSci)
Senior Systems Programmer - Systems Integration
Information Technology Services
The University of Queensland
Brisbane QLD 4072 Australia
email: scott@uq.edu.au | phone: +61 7 3365 8527
-----------------------------------------------------
