Re: Client authentication with Kerberos ticket

>>>>> Yves Martin <yves.martin@elca.ch>:

> In fact, Tortoise 1.4.0 works properly only if the URL uses the
> server canonical name and not my virtual hostname which a DNS alias
> (CNAME).
> I think it is a bug already corrected in the next neon version.

One kerb problem I've had with kerb in Win2k domains, is with DNS
"ghosts".

Ie. where the reverse DNS for the client comes up with more more than
one FQDN, and the one listed first isn't the FQDN the machine believes
it has (and has requested tickets for). It's the FQDN of some
previous DHCP lease holder for that particular IP address.

It doesn't seem to be a problem when communicating with the domain
controller, but it has been a problem when accessing HTTP servers
(both IIS and apache/kerb).

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@subversion.tigris.org
For additional commands, e-mail: users-help@subversion.tigris.org
Received on Mon Dec 25 19:22:39 2006