|
Posted by S. Pidgorny on January 11, 2006, 5:52 am
If you were Registered and logged in, you could reply and use other advanced thread options
Windows NT doesn't support Kerberos. NTLM delegation will still work - I
think you need to look into cprotocol transition from NTLM so that the Web
server (Win2003) wilkl obtain a Kerberos ticket for the user. Not sure about
the details - might need to ask in the IIS groups.
--
Svyatoslav Pidgorny, MS MVP - Security, MCSE
-= F1 is the key =-
"Chris Geier" <chris.geier at gmail.com> wrote in message
> Hello,
>
> I have a question about Kerberos in an environment mixed with 2003, 2000
> and
> NT 4. If the domain containing both the servers, and the user accounts
> themselves that have SPN's assisgned to them are in 2003 or 2000 but the
> client making the front end request is running in NT4 with a trust to 2000
> or
> 2003. Can the backend servers still take advantage of Kerberos delegation
> etc.
>
> So a nt 4 client contacts a Sharepoint 2003 server that resides in a 2000
> domain. That sharepoint server operating under a service account with all
> the proper settings SPN's etc need to go talk to another application on
> behalf of that user using kerberos delegation. Will that work or does the
> client os need to be xp or 2000. What are the limitations. Can the client
> os
> be nt4 if the machine account and user account are in AD?
| 
Yahoo! 
Google 
Windows Live 
del.icio.us 
digg 
Netscape 
XML site map