[28119] in Kerberos
Cross Realm: Problem with Default Realm
daemon@ATHENA.MIT.EDU (Miguel Sanders)
Thu Jul 26 16:15:09 2007
From: Miguel Sanders <miguelsanders@telenet.be>
Date: Thu, 26 Jul 2007 13:13:02 -0700
Message-ID: <1185480782.584120.12250@57g2000hsv.googlegroups.com>
Mime-Version: 1.0
X-Complaints-To: groups-abuse@google.com
Complaints-To: groups-abuse@google.com
To: kerberos@mit.edu
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: kerberos-bounces@mit.edu
Dear all
I managed to do cross realm authentication between AD realm A and MIT
realm B.
However this only works if, hosts in realm B, have "default_realm =A"
in their krb5.conf. I have some problems with this since there are
quit a lot of other principals in realm B...
Perhaps a setting in krb5.conf that can solve this issue:
Snippet:
[libdefaults]
default_realm = A
default_keytab_name = FILE:/etc/krb5/host.keytab
default_tkt_enctypes = des3-cbc-sha1 arcfour-hmac aes256-cts
des-cbc-md5 des-cbc-crc
default_tgs_enctypes = des3-cbc-sha1 arcfour-hmac aes256-cts
des-cbc-md5 des-cbc-crc
forwardable = true
dns_lookup_realm = no
dns_lookup_kdc = no
[realms]
B = {
kdc = kdc.b.com
}
A = {
kdc = kdc.a.com
}
[domains]
.b.com = B
b.com = B
.a.com = A
a.com = A
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
