[29185] in Kerberos
Re: Windows not using SRV rr's to locate KDCs
daemon@ATHENA.MIT.EDU (Richard E. Silverman)
Mon Feb 4 22:00:23 2008
From: "Richard E. Silverman" <res@qoxp.net>
Date: Mon, 04 Feb 2008 21:46:27 -0500
Message-ID: <m27ihkyvb0.fsf@darwin.oankali.net>
MIME-Version: 1.0
X-Complaints-To: abuse@speakeasy.net
X-DMCA-Complaints-To: abuse@speakeasy.net
To: kerberos@mit.edu
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: kerberos-bounces@mit.edu
Following up: a support call to Microsoft revealed magic, undocumented
bits to get this working. Specifically:
HKLM\SYSTEM\CurrentControlSet\Control\Lsa\Kerberos\Domains\<REALM>\RealmFlags = REG_DWORD
#define KERB_MIT_REALM_KDC_LOOKUP 0x00010000
#define KERB_MIT_REALM_KPWD_LOOKUP 0x00020000
ksetup.exe sets the flags in this word, but does not know about these bits.
--
Richard Silverman
res@qoxp.net
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
