Re: Heimdal KDC, Windows XP and local users



I have configured Windows XP to use a Heimdal KDC for user authentication.
All existing Windows users can authenticate against the KDC, user
mapping is "ksetup /mapuser * *".

However, Windows does not create a new local user with the same name
as the Kerberos princical I try to authenticate as.

If you have users defined on LDAP, maybe the s+c Authentication
Package (http://sourceforge.net/projects/sc-ap/) might help you. And
if your valid users are not available anywhere, it is not hard to
modify to drop the LDAP lookups and simply create a local account.

Javier Palacios
.



Relevant Pages

  • Re: Heimdal KDC, Windows XP and local users
    ... All existing Windows users can authenticate against the KDC, ... Windows does not create a new local user with the same name ... however LDAP seems superfluous for my purpose. ...
    (comp.protocols.kerberos)
  • Re: access denied - IS THERE a definitive solution????
    ... accounts were added while part of the domain... ... none of the local user ... The part that's really ticking off, though, is that I DO authenticate ... profile created. ...
    (microsoft.public.win32.programmer.wmi)
  • Re: access denied - IS THERE a definitive solution????
    ... none of the local user ... The part that's really ticking off, though, is that I DO authenticate ... profile created. ... I would test deleting the profile created for the user when in a workgroup, ...
    (microsoft.public.win32.programmer.wmi)
  • Re: Client Certificate not reaching server
    ... Clould you please elobarate. ... > authenticate the local user, not the server, so the private key is needed. ... >> am adding that certificate file to httpwebrequest. ...
    (microsoft.public.dotnet.security)
  • Re: FTP server authentication issue.
    ... you should be able to authenticate locally. ... > user to log on to the ftp site. ... So i created a local user, but the local user is unable to ... >> listing on the security on all folders. ...
    (microsoft.public.inetserver.iis.ftp)