[28120] in Kerberos
Re: Cross Realm: Problem with Default Realm
daemon@ATHENA.MIT.EDU (Russ Allbery)
Thu Jul 26 16:24:11 2007
From: Russ Allbery <rra@stanford.edu>
To: kerberos@mit.edu
In-Reply-To: <1185480782.584120.12250@57g2000hsv.googlegroups.com> (Miguel
Sanders's message of "Thu, 26 Jul 2007 13:13:02 -0700")
Date: Thu, 26 Jul 2007 13:23:53 -0700
Message-ID: <87r6mu6hie.fsf@windlord.stanford.edu>
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: kerberos-bounces@mit.edu
Miguel Sanders <miguelsanders@telenet.be> writes:
> I managed to do cross realm authentication between AD realm A and MIT
> realm B. However this only works if, hosts in realm B, have
> "default_realm =A" in their krb5.conf. I have some problems with this
> since there are quit a lot of other principals in realm B...
Well, that certainly isn't normally required. I think we need a lot more
information, such as exactly what commands you ran, what their output was,
what you expected their output to be, and what tickets you have in your
cache afterwards.
The domain_realm mapping is normally all that's required for cross-realm
to work properly to hosts subject to that mapping.
--
Russ Allbery (rra@stanford.edu) <http://www.eyrie.org/~eagle/>
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
