Is it possible to connect from Win2K clients to SMB services
using Kerberos authentication with the following setup:

MY_PC             Win2K OS,  Win2K KDC (W2K_REALM)
MY_HOST        non MS OS, MIT KDC (MIT_REALM)

Win2K KDC and MIT KDC have bi-directional cross realm trust.

With this setup there is no problem is running a GSSAPI application
between MY_PC and MY_HOST as client app asks for a ticket
for my_service/my_host@MIT_REALM and W2K is able to get
one using cross realm authentication.

Is it possible to configure W2K so that it understands that my_host is
in the MIT_REALM?

In the absence of such understanding, a mapping to a share on
my_host does not use Kerberos authentication.

Salil Dangi


Reply via email to