3 ms·
From http://www.h5l.org/manual/HEAD/info/heimdal/Authorisation-data.html#Authorisation-data http://www.h5l.org/manual/HEAD/info/heimdal/Authorisation-da...:
by gchpaco 14y ago
From http://www.h5l.org/manual/HEAD/info/heimdal/Authorisation-data.html#Authorisation-data http://www.h5l.org/manual/HEAD/info/heimdal/Authorisation-da...:
The Windows 2000 KDC also adds extra authorisation data in tickets. It is at this point unclear what triggers it to do this. The format of this data is only available under a “secret” license from Microsoft, which prohibits you implementing it.
This makes/made? it difficult to have a Windows domain authenticate against an existing KDC; you needed to set up an AD server and then set up cross-domain trust relationships, which means you must have a Windows server on your network in order to support Windows AD clients.
- ethomson 14y agoVery interesting. I had a similar setup in a previous life without any issues, but the "it is at this point unclear what triggers it to do this" is ominous indeed, so it's possible I just went down the happy path where this sort of issue doesn't come up.