On Sun, 2007-01-28 at 19:51 +0100, Stefan Gohmann wrote: > Hi Henry, > > Am Freitag, 26. Januar 2007 20:22 schrieb Henry B. Hotz: > > I had an exchange with Jeffrey Altman on MIT's krbdev list where I > > worked through all the config items in Mozilla relatives to make a > > Windows client use the Kerberos libraries in KfW. You ought to be > > able to find it with Google. It works. > > that's very nice. > > > MS IE will always use the Microsoft kerberos implementation and the > > tickets in the LSA. > > Does that mean, it is not possible that the MS IE uses the ticket from the > Heimdal KDC? It is quite possible, but you must get the ticket with Microsoft's kerberos libraries. We use Microsoft's native krb5 code to bind against Samba4 (which uses Heimdal internally) all the time. (This gets the tickets at logon, but I think they have utilities to let you get tickets after logon). Andrew Bartlett -- Andrew Bartlett http://samba.org/~abartlet/ Authentication Developer, Samba Team http://samba.org Samba Developer, Red Hat Inc. http://redhat.com
This is a digitally signed message part