[29307] in Kerberos
RE: support SSO in Windows with Keberos TGT
daemon@ATHENA.MIT.EDU (sylvain cortes)
Tue Feb 19 18:00:04 2008
Message-ID: <BAY137-W45BA03BBC0ABBEE945F0C0A5220@phx.gbl>
From: sylvain cortes <sylvaincortes@hotmail.com>
To: "Christopher D. Clausen" <cclausen@acm.org>
Date: Tue, 19 Feb 2008 21:52:15 +0100
In-Reply-To: <EC316F00D981473C8BD26FCF40890B23@CDCHOME>
MIME-Version: 1.0
Cc: kerberos@mit.edu
Content-Type: text/plain; charset="iso-8859-1"
Errors-To: kerberos-bounces@mit.edu
Content-Transfer-Encoding: 8bit
hi - you always can do everything...it's a question about time ;-)
I did the "classic" way before using centrify, and it was "hell" to maintain: manage the keytab, manage the "ad account", manage the NTP client to have the right ticket session, etc...
Sylvain CORTES sylvaincortes@hotmail.com
> From: cclausen@acm.org> To: sylvaincortes@hotmail.com> CC: kerberos@mit.edu> Subject: Re: support SSO in Windows with Keberos TGT> Date: Tue, 19 Feb 2008 13:08:22 -0600> > sylvain cortes <sylvaincortes@hotmail.com> wrote:> > So, for example, a windows computer which use Putty can present a> > kerberos ticket to a Unix machine with the Centrofy client, without> > any re-authentication. And Unix to Windows, or Unix to Unix works> > also in the same way.> > You can do that without paying for Centrify. All you need to is to > correctly setup the machine keytab and get a putty version that supports > GSSAPI credential forwarding.> > <<CDC> >
_________________________________________________________________
Microsoft vous recommande de mettre à jour Internet Explorer.
http://specials.fr.msn.com/IE7P25
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
