Re: Questions about LDAP, Heimdal and 2003 Server

[Timothy J Miller <tmiller@mitre.org>]

On Jan 30, 2008, at 8:54 PM, Henry B. Hotz wrote:

> You can deploy a Windows Domain with a cross-realm trust to  
> Kerberos, but the LDAP information for Windows will be on the  
> Domain controller.
>
> You might be able to replace your W2K3 server with a Samba 4 server  
> (which bundles a version of Heimdal), but this isn't the place to  
> ask about that.

Also, recall that Windows services require authorization-data to be  
populated in the ticket, something that most KDCs don't do.

-- Tim

smime.p7s