[27057] in Kerberos
Re: Migrating a Kerberos Realm
daemon@ATHENA.MIT.EDU (Ken Hornstein)
Tue Nov 21 17:20:56 2006
Message-Id: <200611212219.kALMJuL8007575@ginger.cmf.nrl.navy.mil>
To: kerberos@mit.edu
In-Reply-To: <4563790F.6040607@dlconsulting.com>
Date: Tue, 21 Nov 2006 17:19:57 -0500
From: Ken Hornstein <kenh@cmf.nrl.navy.mil>
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: kerberos-bounces@mit.edu
>addprinc -requires_preauth krbtgt/OFFICE@COMPANY.COM
>addprinc -requires_preauth krbtgt/COMPANY.COM@OFFICE
>
>
>And er... it doesn't work. Did I miss something?
Well, there are a few things you are missing. Like, for one ... you
say it doesn't work. Well, what happens? Do you have an error message?
Any diagnostics at all?
First off ... are you really sure about the -requires_preauth flag? I
am 95% sure you don't want it. (I know that documentation you list shows
that; I am frankly rather surprised that it does, as I can think of only
a few reasons why you would want that, and a whole bunch why you wouldn't).
I doubt that's the real problem, though.
--Ken
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
