Differences between version 4 and predecessor to the previous major change of KerberosNotes.
Other diffs: Previous Revision, Previous Author, or view the Annotated Edit History
| Newer page: | version 4 | Last edited on Monday, November 29, 2004 1:15:19 am | by HikariCrowther | Revert |
| Older page: | version 3 | Last edited on Thursday, June 19, 2003 1:01:10 am | by PerryLorier | Revert |
@@ -39,4 +39,10 @@
to list your keys. if you don't have any keys, you've done something wrong. Good luck finding out what :) (but when you do... Wiki the problem/answer on this page)
----
kadmin.local has a whole heap of useful commands letting you add new users/delete users and change passwords. Neat!
+
+
+----
+Microsoft has an [Interoprability Guide|http://www.microsoft.com/resources/documentation/Windows/XP/all/reskit/en-us/Default.asp?url=/resources/documentation/Windows/XP/all/reskit/en-us/prdp_log_tjil.asp] on their website for setting up Windows 2000 and XP Professional to use interactive logins that use the KDC as the authentication source.
+
+Unfortunatly this guide is not complete, it fails to mention that MIT's version of KerberosV and Microsoft's implementation only share one enctype in common, namely DES-CBC-CRC. This means that when you add a host principle for a Windows machine you will need to use the "-e des-cbc-crc:normal" option to the ank command. Otherwise Windows will try to use its own RC4-HMAC enctype, which is not (currently) supported by MIT KerberosV; it possibly is supported by Heimdal KerberosV.
