Reg: Kerberos Login handler

[Douglas E. Engert]

On 1/17/2013 5:37 AM, Prasanna wrote:
> Hello All,
>
> I am trying to provide true single sign on for my Shibboleth login using
> Kerberos login handler.

>
> I was trying to find out my kerberos ticket using kinit command...It seems
> kinit is not supported in windows.

kinit will get a new ticket using a username and password. klist will list
the tickets you have.

Windows has built in Kerberos support used with AD, and stores Kerberos
tickets internally in the LSA. If the windows machine is part of the domain,
and you logon, you get Kerberos tickets. The windows runas command will also
get tickets, and can be used on systems that are not part of the domain.
(IMHO, for the ordinary user, unless they logon using to their AD domain,
kerberos will be very confusing.)


There are other Kerberos implementations for Windows include the MIT KfW,
and Java. Both have a kinit and klist. The store tickets in a different
location, but can access the windows LSA.

I would also suggest the Network Identity Manager from:
  https://www.secure-endpoints.com/

>
> Can anyone suggest me how to install kinit.exe?

>
> I have my IdP installed in windows 2008 R2 server?

The IDP could be on any type system.

Also search for: SSPI, gssapi, and spnego.


>
> Thanks
> Prasanna
>
>
>
> -----
> Prasanna V B
> --
> View this message in context: http://shibboleth.1660669.n2.nabble.com/Reg-Kerberos-Login-handler-tp7584113.html
> Sent from the Shibboleth - Users mailing list archive at Nabble.com.
> --
> To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net
>
>

-- 

  Douglas E. Engert  <DEEngert at anl.gov>
  Argonne National Laboratory
  9700 South Cass Avenue
  Argonne, Illinois  60439
  (630) 252-5444