Authentication through Transitive Trusts

[Ken Cross]

> -----Original Message-----
> From: Andrew Bartlett [mailto:abartlet at samba.org] 
> Sent: Wednesday, April 09, 2003 7:08 PM
> To: Ken Cross
> Cc: 'Rafal Szczesniak'; 'Multiple recipients of list SAMBA-TECHNICAL'
> Subject: RE: Authentication through Transitive Trusts
> 
> 
> On Thu, 2003-04-10 at 07:13, Ken Cross wrote:
> > Part of this problem could be due to the fact that Samba uses NTLM 
> > instead of Kerberos for user authentication.
> > 
> > If the transitive trusts work via Kerberos referrals, I 
> think we could 
> > be screwed.
> 
> Well, technically it's possible to do NTLM referrals - but as 
> we just contact our PDC, it's really up to what an MS PDC will do.
> 
> Andrew Bartlett
> 

But that's all a Windows box does, too.  Any idea how transitive trusts
work for them?  (And they do, very nicely.)

Ken
________________________________

Ken Cross

Network Storage Solutions
Phone 865.675.4070 ext 31
kcross at nssolutions.com