[25211] in Kerberos

home help back first fref pref prev next nref lref last post

Re: Determining the Kerberos domain in HTTP

daemon@ATHENA.MIT.EDU (=?ISO-8859-1?Q?=22Martin_v=2E_L=F6)
Wed Jan 4 22:48:32 2006

Message-ID: <43BB163C.90605@v.loewis.de>
Date: Wed, 04 Jan 2006 01:26:36 +0100
From: =?ISO-8859-1?Q?=22Martin_v=2E_L=F6wis=22?= <martin@v.loewis.de>
To: kerberos@mit.edu
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: kerberos-bounces@mit.edu

Douglas E. Engert wrote:
> This sounds like IE and sspi are using referrals:
> 
> http://www.ietf.org/internet-drafts/draft-ietf-krb-wg-kerberos-referrals-06.txt

I see. I now think I understand what's happening: A.B.COM and B.COM
are distinct forests. So B.COM will not issue domain referrals for
A.B.COM, unless there is a forest trust (which there isn't either;
neither domain is on the Windows 2003 forest functional level).

Thanks everybody for the help.

Regards,
Martin
________________________________________________
Kerberos mailing list           Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos

home help back first fref pref prev next nref lref last post