[29296] in Kerberos
IIS refuse un-preauth-ed tickets?
daemon@ATHENA.MIT.EDU (Speedo)
Tue Feb 19 11:26:33 2008
From: Speedo <speedogoo@gmail.com>
Date: Tue, 19 Feb 2008 00:18:23 -0800 (PST)
Message-ID: <806d909c-eb80-4001-b466-124a94834452@d21g2000prf.googlegroups.com>
Mime-Version: 1.0
X-Complaints-To: groups-abuse@google.com
Complaints-To: groups-abuse@google.com
To: kerberos@mit.edu
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: kerberos-bounces@mit.edu
Sorry to post into 2 groups.
I have a Java application using Kerberos to talk to IIS on a Windows
domain. First I call java's kinit and then use the acquired initial
TGT to connect to IIS with JGSS. When the initial ticket is pre-
authed, I can get the web content. However, if I set the user account
as "do not require preauth" and acquire such an un-preauth-ed initial
TGT, and then get a service ticket for IIS using this TGT, it seems
this ticket cannot be used to retrieve pages from IIS (using SPNEGO).
Is this a designed feature?
Thanks
Speedo
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
