[28985] in Kerberos
Re: Heimdal KDC, Windows XP and local users
daemon@ATHENA.MIT.EDU (Christopher D. Clausen)
Wed Jan 9 11:00:11 2008
From: "Christopher D. Clausen" <cclausen@acm.org>
Date: Wed, 9 Jan 2008 09:45:42 -0600
Message-ID: <fm2qgg$9p0$1@news.ks.uiuc.edu>
X-Complaints-To: news+abuse@ks.uiuc.edu
To: kerberos@mit.edu
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: kerberos-bounces@mit.edu
Victor Sudakov <vas@mpeks.no-spam-here.tomsk.su> wrote:
> I have configured Windows XP to use a Heimdal KDC for user
> authentication. All existing Windows users can authenticate against
> the KDC, user
> mapping is "ksetup /mapuser * *".
>
> However, Windows does not create a new local user with the same name
> as the Kerberos princical I try to authenticate as.
No, Windows does not, nor should it. You mapped all principals to a
single user account. If you want seperate accounts, you'll need to
actually create the accounts ahead of time and map the principal to the
individual accounts.
> Can this be helped? I want to create a new user in the Kerberos
> database only, and this user's profile on the Windows machine should
> be created automatically.
You may be able to get pGina do what you want: http://www.pgina.org/
<<CDC
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
