Kerberos Database Sync with Sub-Domains

Jonathan Towles <[email protected]>
Newsgroups gmane.comp.encryption.kerberos.general
Message-ID <MN2PR15MB3071B51D8434CF65FB80E728B9600@MN2PR15MB3071.namprd15.prod.outlook.com>
Hi All,

I wanted to ask a question that I have been unable to get clear information on.

Is it technically or functionally possible to get a Kerberos ticket for someone in the sub-domain against the parent domain

Example:

User [email protected]<mailto:[email protected]> wants to get a Kerberos ticket against dc01.synterex.com but will fail because that user is not found in the database on that Domain Controller.

I didn't think that it was, but I wanted to check and see if anyone knows.

Jon Towles
CTO, Synterex
(m) 978-609-5545

[VMware Certified Professional - Digital Workspace 2020][VMware Certified Professional - Desktop and Mobility 2020][cid:[email protected]] [cid:[email protected]]  [cid:[email protected]] [cid:[email protected]]

________________________________________________
Kerberos mailing list           [email protected]
https://mailman.mit.edu/mailman/listinfo/kerberos
image001.png (image/png, 6.5 KB) - not displayed
image002.png (image/png, 6.5 KB) - not displayed
image003.jpg (image/jpeg, 3.6 KB) - not displayed
image004.png (image/png, 8.5 KB) - not displayed
image005.png (image/png, 8.8 KB) - not displayed
image006.png (image/png, 14.1 KB) - not displayed
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.