Reg: Kerberos Login handler
Barry R. Ribbeck
Barry.R.Ribbeck at rice.edu
Thu Jan 17 10:15:50 EST 2013
Kinit is native on the Mac OS and Linux and both can work against a
Windows KDC
On 01/17/2013 09:11 AM, Douglas E. Engert wrote:
> On 1/17/2013 5:37 AM, Prasanna wrote:
>> Hello All,
>>
>> I am trying to provide true single sign on for my Shibboleth login using
>> Kerberos login handler.
>> I was trying to find out my kerberos ticket using kinit command...It seems
>> kinit is not supported in windows.
> kinit will get a new ticket using a username and password. klist will list
> the tickets you have.
>
> Windows has built in Kerberos support used with AD, and stores Kerberos
> tickets internally in the LSA. If the windows machine is part of the domain,
> and you logon, you get Kerberos tickets. The windows runas command will also
> get tickets, and can be used on systems that are not part of the domain.
> (IMHO, for the ordinary user, unless they logon using to their AD domain,
> kerberos will be very confusing.)
>
>
> There are other Kerberos implementations for Windows include the MIT KfW,
> and Java. Both have a kinit and klist. The store tickets in a different
> location, but can access the windows LSA.
>
> I would also suggest the Network Identity Manager from:
> https://www.secure-endpoints.com/
>
>> Can anyone suggest me how to install kinit.exe?
>> I have my IdP installed in windows 2008 R2 server?
> The IDP could be on any type system.
>
> Also search for: SSPI, gssapi, and spnego.
>
>
>> Thanks
>> Prasanna
>>
>>
>>
>> -----
>> Prasanna V B
>> --
>> View this message in context: http://shibboleth.1660669.n2.nabble.com/Reg-Kerberos-Login-handler-tp7584113.html
>> Sent from the Shibboleth - Users mailing list archive at Nabble.com.
>> --
>> To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net
>>
>>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: Barry_R_Ribbeck.vcf
Type: text/x-vcard
Size: 362 bytes
Desc: not available
Url : http://shibboleth.net/pipermail/users/attachments/20130117/4c2e1a48/attachment-0001.vcf
More information about the users
mailing list