New approach to win2k joins...

[Jim McDonough]

>> But when I try to logon, it tries to use the short version of the domain
as
>> the realm...which my MIT KDC doesn't like.  Any ideas here?
>
>when is it supposed to get the realm ? are you sure it's getting it
>correctly ?
I'm not sure exactly what your question is, but this is exactly how a win2k
<->win2k interaction is.  If there is a short (netbios) domain name that
shows up in the logon screen, that's what gets sent as the realm for the
principal to the KDC...and the tgt that is returned has the full true realm
name in the principal...!
>do you have a trace of a user logging on the box ?
I can give you this or the equivalent in win2k<->win2k, and you'll see the
realm thing I'm talking about...


----------------------------
Jim McDonough
IBM Linux Technology Center
Samba Team
6 Minuteman Drive
Scarborough, ME 04074
USA

jmcd at us.ibm.com
jmcd at samba.org

Phone: (207) 885-5565
IBM tie-line: 776-9984