authentication using kerberos

[Derrick J Brashear]

On Wed, 22 Dec 2004, Aleksandar Milivojevic wrote:

>> Do you have a host/(hostname) key in the database?
>
> OK, so I added host/hostname key.  And the authentication against AD now 
> works.  I guess this step can't be skipped...

It can, but only if you edit source to use a different principal to do 
verification against, or use heimdal. heimdal's verify function uses the 
service in question, while the mit case builds a service principal with 
the relevant sname function and uses krb5_mk_req to do verification.


---
Cyrus Home Page: http://asg.web.cmu.edu/cyrus
Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html