Re: kerberos

"" wrote:
> Hi,
>
> I want to use kerberos on a server. Is this a service which
> just has to
> be enabled, or do I have to download and install it first?
>
> Thanks,
>
> Huub

when talking about Windows machines you can only use kerberos on
Windows 2000 and up computers in an Active Directory forest. Those
machines in a AD forest will use kerberos by default. computers ar in
a NT4 domain NTLM will be used for authentication. If you have NT4
servers in a AD forest/domain, again NTLM will be used. Using Kerberos
or NTLM depends on the OS of the machines that talk to each other
WITHIN a AD forest and which of the two is the weakest link.

--
Posted using the http://www.windowsforumz.com interface, at author's request
Articles individually checked for conformance to usenet standards
Topic URL: http://www.windowsforumz.com/kerberos-ftopict434415.html
Visit Topic URL to contact author (reg. req'd). Report abuse: http://www.windowsforumz.com/eform.php?p=1463220
.

Relevant Pages

  • Re: Integrated Windows Authentication Timeout?
    ... Is it possible that a different host name is being used for one of the subsequent requests that would break Kerberos auth? ... If you have "Negotiate" authentication set in the metabase, then this can still negotiate down to NTLM if for some reason the protocol thinks that Kerberos is unavailable. ... server. ...
    (microsoft.public.dotnet.framework.aspnet.security)
  • Re: Kerberos to NTLM???
    ... It is by design if Kerberos authentication fails, ... Windows 2000 and 2003 domain controllers support Kerberos and NTLM ... 2-way trust between 2 Windows Server 2003 domains. ...
    (microsoft.public.windows.server.networking)
  • v6 windows Update Error 0x80072EEF
    ... The WinXP and Win2003 server machines update progerly using the same isa ... <Negotiate (NTLM or Kerberos);> ...
    (microsoft.public.windowsupdate)
  • Re: Internet Explorer is using NTLM insted of Kerberos
    ... > When the TCP stream was decoded by the sniffer I found that the server ... > and the client sent an NTLM keys ... How to configure IIS to support both Kerberos and NTLM authentication: ... Unable to Negotiate Kerberos Authentication After Upgrading to Internet ...
    (microsoft.public.windows.server.active_directory)
  • Re: Server 2008 in NT-Dom?e
    ... der Windows 2008 Server das Kerberos ... Authentifikationsprotokoll nutzt und Win NT das NTLM Version 2 und ... Kerberos v5 is the default for these versions except when exchanging ... NTLM is also the authentication protocol for computers ...
    (microsoft.public.de.german.windows.server.general)
Loading