Rocksolid Light

Welcome to novaBBS (click a section below)

mail  files  register  newsreader  groups  login

Message-ID:  

Be careful when a loop exits to the same place from side and bottom.


devel / comp.protocols.kerberos / Authentication Indicators and Cross Realm Trust

SubjectAuthor
* Authentication Indicators and Cross Realm TrustMachin, Glenn Douglas
`- Re: Authentication Indicators and Cross Realm TrustTodd Heron

1
Authentication Indicators and Cross Realm Trust

<mailman.104.1664568428.8148.kerberos@mit.edu>

  copy mid

https://www.novabbs.com/devel/article-flat.php?id=303&group=comp.protocols.kerberos#303

  copy link   Newsgroups: comp.protocols.kerberos
Path: i2pn2.org!i2pn.org!weretis.net!feeder6.news.weretis.net!tncsrv06.tnetconsulting.net!.POSTED.mailman.mit.edu!not-for-mail
From: mach...@llnl.gov (Machin, Glenn Douglas)
Newsgroups: comp.protocols.kerberos
Subject: Authentication Indicators and Cross Realm Trust
Date: Fri, 30 Sep 2022 20:06:27 +0000
Organization: TNet Consulting
Lines: 8
Message-ID: <mailman.104.1664568428.8148.kerberos@mit.edu>
References: <SA0PR09MB65397CAF7D4F6D48A3C7A8A49A569@SA0PR09MB6539.namprd09.prod.outlook.com>
Mime-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
Injection-Info: tncsrv06.tnetconsulting.net; posting-host="mailman.mit.edu:18.7.21.50";
logging-data="22128"; mail-complaints-to="newsmaster@tnetconsulting.net"
To: "kerberos@mit.edu" <kerberos@mit.edu>
Authentication-Results: mit.edu;
dmarc=pass (p=reject dis=none) header.from=llnl.gov
Authentication-Results: mit.edu; arc=pass smtp.remote-ip=18.9.3.17
ARC-Seal: i=4; a=rsa-sha256; d=mit.edu; s=arc; t=1664568427; cv=pass;
b=WSSZgH3hiucIoUgKYDJcxb40zkMeTOXR5lGyx1F15luPvNHjH32yCBHvvrnFmwOfFXpSIO2KABPhepVmkjwi9ts/p+kwm1sMsRK3ocxYl6kVyucmT0EpWsnyq6bTZn2Tr1fUKlqg4eqJTmLgEx1rVLz8PHi595JoCuM5/rJWt66AqrhZ46glKmIjWGKOaO4iQd/UI4hyHZM7mZ77/ZnzaBOVZZJ8XpNj+M5zwpBph5rZEAG5ghE6yFtVfm3ga2IiILfWb9fMcCeMg5PkHsubOMVrdn9uIwLQtEKeIIYm/52YL0+gDFEQU3HshDUf2jeXHQrlpAbU65Mec4cJZA5Q0A==
ARC-Message-Signature: i=4; a=rsa-sha256; d=mit.edu; s=arc; t=1664568427;
c=relaxed/relaxed; bh=nz+FB3iqxESeZ1HXftOBLz/pAd0xhl2W5Y2aPb+lwFc=;
h=DKIM-Signature:DKIM-Signature:DKIM-Signature:From:To:Subject:Date:
Message-ID:MIME-Version;
b=z/yg2pOYBXwu5DqUJKSQl3O46BWklCv7qOBL2n9I3kyblgk7zNP5x5DxQe4bYhHGTfaPup7JPcQnFCZ21n9o0HSvaUAyVG2XWGNS6KJS1yN3yur60+0JkNZRiihHFdHt1lAXojiE+FWuosURCb3Pl7mEyyer63Chm42DL2fylbF4bf1wasMcS0IjznZwWhEEBqyqBbMrdyziVFQ2twK74G3soOYqTB/KOyDwCu+JfdXda1MrB0YwjERbvh1SrpInux0ptPhxHd/pTs5st5YsClqXHdgKG13YaiBBmXCG7YmS/rEG8i+QpVoV/s0alB85gzPpU9LM7TL+fGNTBrZKHA==
ARC-Authentication-Results: i=4; mit.edu; dkim=pass (1024-bit key)
header.d=mitprod.onmicrosoft.com header.i=@mitprod.onmicrosoft.com
header.b=jv99EYrH;
dkim=pass (2048-bit key) header.d=llnl.gov header.i=@llnl.gov
header.b=mdMR/St/;
dkim=fail (1024-bit key) header.d=doellnl.onmicrosoft.com
header.i=@doellnl.onmicrosoft.com header.b=WP3Ctqph reason="signature
verification failed"
Authentication-Results: mit.edu;
dkim=pass (1024-bit key) header.d=mitprod.onmicrosoft.com
header.i=@mitprod.onmicrosoft.com header.b=jv99EYrH;
dkim=pass (2048-bit key) header.d=llnl.gov header.i=@llnl.gov
header.b=mdMR/St/;
dkim=fail reason="signature verification failed" (1024-bit key)
header.d=doellnl.onmicrosoft.com header.i=@doellnl.onmicrosoft.com
header.b=WP3Ctqph
ARC-Seal: i=3; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=pass;
b=ghimJ652+4vz60MaRvK7bDKenJrVHYSjPd9BcAMquLpTvcTzkkYOHMYQwlFnMnNKBwlA83TjuAXcLXEnEvrAIfePTKEPM5GDqJ9bhQ9G2P7gbOiXB6XoQGYIJRdib1T9LmtUS2tmMByQd/6RHdcaInKWFLD6L50V3B2fztopxmEAkcUsu/snI1qy72vUzBITtrOoBZ5cQeVpa4D5U+DlHqsqFKRzyQqyyIydtr5NSP2Gu9WB1gr7Xy9960B86vECYyp2/putXt1AiHU2lN4Oh5i69yvxkdIDD5NuCNnSFndAsctmwzFnvvK/3MvNFtosFc8sA65r/hss9X/maltTAg==
ARC-Message-Signature: i=3; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;
s=arcselector9901;
h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;
bh=nz+FB3iqxESeZ1HXftOBLz/pAd0xhl2W5Y2aPb+lwFc=;
b=Xb6iWD9CXtDVPTUkEisu0vy4gn9glAJEfrtcrp8zTkIfLricB1jCiz/A6HFMNUFQFmZ/0TTYO6y5WY3zXDlRLyPuMgD77tcU/3NtI1kqZERlScRpBNZxYDmfyqWm7u8ccooz+KycXZuKz+rTn0CL0fnImiv36XF2VF+Nk7rbTV+TVZ/GLqdrueL2pmRuI85fGu2eONOInXbwm1bkjVh8+RnzpaQehXFjdTI4b0d19G8kFP8webDAhSanQrVA9uafKdW4db3b6+UpXGMJ6BVLBemkTKakVeFHKPceyaNCos2cKf926cZHOQduUJknQhcvaDHaEKP4h12qSPg15RolLw==
ARC-Authentication-Results: i=3; mx.microsoft.com 1; spf=pass (sender ip is
67.231.147.129) smtp.rcpttodomain=mit.edu smtp.mailfrom=llnl.gov; dmarc=pass
(p=reject sp=reject pct=100) action=none header.from=llnl.gov; dkim=pass
(signature was verified) header.d=llnl.gov; dkim=pass (signature was
verified) header.d=doellnl.onmicrosoft.com; arc=pass (0 oda=1 ltdi=1
spf=[1,1,smtp.mailfrom=llnl.gov] dkim=[1,1,header.d=llnl.gov]
dmarc=[1,1,header.from=llnl.gov])
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=mitprod.onmicrosoft.com; s=selector2-mitprod-onmicrosoft-com;
h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;
bh=nz+FB3iqxESeZ1HXftOBLz/pAd0xhl2W5Y2aPb+lwFc=;
b=jv99EYrH5WWjdxezf8DHJXO0eOjQWYNf3KRabQ+Mq2BTJpIBBcXzDOa7h0HhqrgF16HmEjyrWe1w7q94szlyUhcep73IC/dni1HtPfSDbBuZkRMrlqnJj7ELsgsV8FmjFggyJ1iS8qwsonAqpK6Yyq3LWpg7JPY5ieryOvrKPXo=
ARC-Seal: i=2; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=pass;
b=DJ9cjMBbcN/lNrx/qquEzg2n7mEE4UZYFHBKjnJGNcvnC6MIxftzoskgnfdJcJIAcRC67ByO/dHeyfQoDjWFroF6J0VFA2653kr29DrCvZa8QLGXNlVMLVaLHP86Hf0dB3mKpAMRl9zGO20NAg/kiJGMPdnfeGhBk5pEWj0bpjbGtnIdFmeNcaiaCNE3BrHoCzviWpv8FMgVQlYMPWENsz9BF4Ki86cGDnEropseJHDU4/b/1JtZSHBBXV5GmYXxFpzVrS7sd+cOfTbIjdKnjVP5t4cEDzdeKu1gukIu/eTNvROXcgMLyOU8dVSOIUFz9IasKpPqf34t8LRoFTnN7Q==
ARC-Message-Signature: i=2; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;
s=arcselector9901;
h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;
bh=nz+FB3iqxESeZ1HXftOBLz/pAd0xhl2W5Y2aPb+lwFc=;
b=SQ77WbmjioqrPUjCFjFNF/eZnmRRYcej28aq7icF30cnqFvefJ0M91kTb8C+cnu8paYZmXRA3sHI/SLrFh00GapjHzda3dlZ2AFYw6MV4W6elCCpow3+DyAsSvt4YYVn6iO0zoKg7aeFNyc55M0jyNfw9a5c8WEH7fFdtp64TcKIb79LhR9XzJm+ezo/2YlzhKchovo5XLKhd8nPaD1g6guS98x10QcvinZgiGaHV35XtRV+WnwhAJLAnDGcAy71yWGnbsZAKXtwr+CiC8nOYI7XCg9Zl1W0ztG7921TmRL5wHuSwPIpgHhQkPY7dCLUC5hG1IwXoBv278G7TS1LnA==
ARC-Authentication-Results: i=2; mx.microsoft.com 1; spf=pass (sender ip is
67.231.147.129) smtp.rcpttodomain=mit.edu smtp.mailfrom=llnl.gov; dmarc=pass
(p=reject sp=reject pct=100) action=none header.from=llnl.gov; dkim=pass
(signature was verified) header.d=llnl.gov; dkim=pass (signature was
verified) header.d=doellnl.onmicrosoft.com; arc=pass (0 oda=1 ltdi=1
spf=[1,1,smtp.mailfrom=llnl.gov] dkim=[1,1,header.d=llnl.gov]
dmarc=[1,1,header.from=llnl.gov])
Authentication-Results: spf=pass (sender IP is 67.231.147.129)
smtp.mailfrom=llnl.gov; dkim=pass (signature was verified)
header.d=llnl.gov;dmarc=pass action=none header.from=llnl.gov;
Received-SPF: Pass (protection.outlook.com: domain of llnl.gov designates
67.231.147.129 as permitted sender) receiver=protection.outlook.com;
client-ip=67.231.147.129; helo=mx0e-00379502.gpphosted.com; pr=C
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=llnl.gov;
h=from : to : subject :
date : message-id : content-type : mime-version; s=02022021-podllnl;
bh=nz+FB3iqxESeZ1HXftOBLz/pAd0xhl2W5Y2aPb+lwFc=;
b=mdMR/St/xDcd3HcYatFSyUBKZvxzhc4zO3Jp2N0zKlxuOaX+QOVjCASZTLqA+uYMFHmt
Wg9t0FoVohcbaDwChhFMJBNfI5LWZpB9hZKcIcrnkazcvg6SW22UeIoGDiaLlq77B6Zc
3xFd4pc+bgaof/zcwRsEZsSCfLcHnPErj5WZ16iz+sJ3K9Dv3glJRrDwtwX0LTwclvFp
KKrhY1XEzLSGnBExTS1NdXAHpgMxnJGSCVyD2VPmDy90LaVAGDpoQL+AfJg8QbJ4kAvp
horu4G19LjPalt4h1hWAxPF+1P/cCJjGkK4ZxPA7ll+5twM2mX/53MUZU+vr33tmm6jk xQ==
ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none;
b=NgosSGdQrK+HsIHsDu6kTkPmQzkltOPafpLe3ebY1usZuVbQwndgubhkzE7+W/HG9/As+/HVOvkbiSgOpO4GufHJAEzMc0Cc54aGBPpiAf31qL52V5PLR840RabSHN1gujRx318/hBvUm6k27R4D8a71YkCvrPzsGI1FGIp0Zbibi7mBl3JcbZanxvh7sH8Dm5blYaxhCSSgZ+W53EvLYUTDNBB2gvcSRlBg0oKMFygnhEM4tkABolKgu8AkxO4/wnLwUAdeidewhmXrZ401Xw3uxlfsGk9t88CK7NnsZvZLhOw1HeFC6nds8UZf8GxVGz33eHbPdtj/L0KXEvzHvg==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;
s=arcselector9901;
h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;
bh=nz+FB3iqxESeZ1HXftOBLz/pAd0xhl2W5Y2aPb+lwFc=;
b=Y1Y+lxd4wTDKTYaw8kx4wfhf5m+bLb8V1PeOOtfkcqOuygjfmF7MyK6vZw2Xk+qa3qxGO9F0LDLJuTi9yeRgsabGm93KZMCngqTUn+PLRvRUPay1zCViDZOdcs8+n0Ap3O0LbY60wyDFFd3YcfKl/uuGPVnL0qlHaGiQIMd8ohKYAY3tHnHDXDzqLwZVeFguMYuvut2dGx3RN8FFrOdVG9dCc3Py/7hxvTOwwSWhWoRJaWACmFmc11VI3qLDU6Cb41FpJBcTcLBHn+Vku2K53SQqSGEHsa9szELqH7/tVFK1M/aRkyUhTIC4YF/3uqTtQWKaV63YUvxP8CoF3PacoA==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass
smtp.mailfrom=llnl.gov; dmarc=pass action=none header.from=llnl.gov;
dkim=pass header.d=llnl.gov; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=doellnl.onmicrosoft.com; s=selector1-doellnl-onmicrosoft-com;
h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;
bh=nz+FB3iqxESeZ1HXftOBLz/pAd0xhl2W5Y2aPb+lwFc=;
b=WP3Ctqph20gWkOq4d02zXsbRIGqgJtHO9W/n9Q2DZPFhOFec4vMyOzjut3xMJTKi1ENeLHA9F9xGv8vOaIxQGauznPnXzxwQFsRDnbpJGH410FBZMKCQaqNwQoqRB3FooyzIdrFBxYMzq/IM7JSLAYdSD//x+z72UEj2iHxSn0o=
Thread-Topic: Authentication Indicators and Cross Realm Trust
Thread-Index: AQHY1QeSEOygoj3850eV2AaUFgt1/Q==
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
x-ms-traffictypediagnostic: SA0PR09MB6539:EE_|SA9PR09MB5565:EE_|CO1NAM11FT031:EE_|DM4PR01MB7619:EE_
X-MS-Office365-Filtering-Correlation-Id: 7155c302-ad44-478b-b94e-08daa31f44df
X-MS-Exchange-SenderADCheck: 0
X-MS-Exchange-AntiSpam-Relay: 0
X-Microsoft-Antispam-Untrusted: BCL:0;
X-Microsoft-Antispam-Message-Info-Original: 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
X-Forefront-Antispam-Report-Untrusted: CIP:255.255.255.255; CTRY:; LANG:en;
SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:SA0PR09MB6539.namprd09.prod.outlook.com;
PTR:; CAT:NONE;
SFS:(13230022)(4636009)(366004)(451199015)(498600001)(55016003)(71200400001)(82960400001)(38070700005)(26005)(33656002)(52536014)(8936002)(2906002)(66446008)(38100700002)(5660300002)(186003)(66946007)(8676002)(64756008)(66476007)(66556008)(76116006)(91956017)(9686003)(558084003)(86362001)(7696005)(6506007)(6916009)(122000001);
DIR:OUT; SFP:1102;
X-MS-Exchange-AntiSpam-MessageData-Original-ChunkCount: 1
X-MS-Exchange-AntiSpam-MessageData-Original-0: ngd36fay63JLaNBL4nueUai/ghnJtRFklfCGQjtJnFQq0CjuFDIh0IzSq06J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X-MS-Exchange-Transport-CrossTenantHeadersStamped: SA9PR09MB5565
X-Proofpoint-ORIG-GUID: recfayNyKx3ZmyquHxcOk-MfZuzRTXQn
X-Proofpoint-GUID: recfayNyKx3ZmyquHxcOk-MfZuzRTXQn
X-Proofpoint-Virus-Version: vendor=fsecure engine=2.50.10434:6.0.528, 18.0.895
definitions=2022-09-30_04:2022-09-29,
2022-09-30 signatures=0
X-Proofpoint-Spam-Details: rule=outbound_notspam policy=outbound score=0
suspectscore=0
priorityscore=1501 spamscore=0 lowpriorityscore=0 clxscore=1011 mlxscore=0
impostorscore=0 mlxlogscore=607 adultscore=0 bulkscore=0 malwarescore=0
phishscore=0 classifier=spam adjust=0 reason=mlx scancount=1
engine=8.12.0-2209130000 definitions=main-2209300126
X-EOPAttributedMessage: 0
X-EOPTenantAttributedMessage: 64afd9ba-0ecf-4acf-bc36-935f6235ba8b:0
X-MS-Exchange-Transport-CrossTenantHeadersStripped: CO1NAM11FT031.eop-nam11.prod.protection.outlook.com
X-MS-PublicTrafficType: Email
X-MS-Office365-Filtering-Correlation-Id-Prvs: a05b015d-f770-468c-27a2-08daa31f4214
X-LD-Processed: 64afd9ba-0ecf-4acf-bc36-935f6235ba8b,ExtAddr
X-MS-Exchange-AtpMessageProperties: SA
X-Microsoft-Antispam: BCL:0;
X-Microsoft-Antispam-Message-Info: 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
X-Forefront-Antispam-Report: CIP:67.231.147.129; CTRY:US; LANG:en; SCL:1; SRV:;
IPV:NLI; SFV:NSPM; H:mx0e-00379502.gpphosted.com;
PTR:mx0e-00379502.gpphosted.com; CAT:NONE;
SFS:(13230022)(4636009)(136003)(346002)(376002)(39860400002)(396003)(451199015)(356005)(7596003)(55016003)(7636003)(498600001)(786003)(52536014)(6862004)(7696005)(83280400002)(83290400002)(26005)(316002)(83320400002)(83310400002)(336012)(6506007)(9686003)(83300400002)(8676002)(5660300002)(33656002)(2906002)(68406010)(70586007);
DIR:OUT; SFP:1102;
X-Auto-Response-Suppress: DR, OOF, AutoReply
X-MS-Exchange-CrossTenant-OriginalArrivalTime: 30 Sep 2022 20:06:31.9766 (UTC)
X-MS-Exchange-CrossTenant-Network-Message-Id: 7155c302-ad44-478b-b94e-08daa31f44df
X-MS-Exchange-CrossTenant-Id: 64afd9ba-0ecf-4acf-bc36-935f6235ba8b
X-MS-Exchange-CrossTenant-AuthSource: CO1NAM11FT031.eop-nam11.prod.protection.outlook.com
X-MS-Exchange-CrossTenant-AuthAs: Anonymous
X-MS-Exchange-CrossTenant-FromEntityHeader: Internet
X-MS-Exchange-Transport-CrossTenantHeadersStamped: DM4PR01MB7619
X-OriginatorOrg: mitprod.onmicrosoft.com
X-Content-Filtered-By: Mailman/MimeDel 2.1.34
X-BeenThere: kerberos@mit.edu
X-Mailman-Version: 2.1.34
Precedence: list
List-Id: The Kerberos Authentication System Mailing List <kerberos.mit.edu>
List-Unsubscribe: <https://mailman.mit.edu/mailman/options/kerberos>,
<mailto:kerberos-request@mit.edu?subject=unsubscribe>
List-Archive: <http://mailman.mit.edu/pipermail/kerberos/>
List-Post: <mailto:kerberos@mit.edu>
List-Help: <mailto:kerberos-request@mit.edu?subject=help>
List-Subscribe: <https://mailman.mit.edu/mailman/listinfo/kerberos>,
<mailto:kerberos-request@mit.edu?subject=subscribe>
X-Mailman-Original-Message-ID: <SA0PR09MB65397CAF7D4F6D48A3C7A8A49A569@SA0PR09MB6539.namprd09.prod.outlook.com>
 by: Machin, Glenn Dougla - Fri, 30 Sep 2022 20:06 UTC

Can someone tell me if a TGT containing an authentication indicator will work over to a service principal in another realm which has a cross realm trust relationship?

Thanks,

Glenn

Re: Authentication Indicators and Cross Realm Trust

<5ce6e25f-cab5-435e-9d9d-752de4dc7b89n@googlegroups.com>

  copy mid

https://www.novabbs.com/devel/article-flat.php?id=304&group=comp.protocols.kerberos#304

  copy link   Newsgroups: comp.protocols.kerberos
X-Received: by 2002:a0c:8041:0:b0:4af:b13b:2624 with SMTP id 59-20020a0c8041000000b004afb13b2624mr9917912qva.92.1664636923749;
Sat, 01 Oct 2022 08:08:43 -0700 (PDT)
X-Received: by 2002:a05:6808:1407:b0:350:df09:d850 with SMTP id
w7-20020a056808140700b00350df09d850mr1302437oiv.88.1664636923454; Sat, 01 Oct
2022 08:08:43 -0700 (PDT)
Path: i2pn2.org!i2pn.org!usenet.blueworldhosting.com!feed1.usenet.blueworldhosting.com!peer02.iad!feed-me.highwinds-media.com!news.highwinds-media.com!news-out.google.com!nntp.google.com!postnews.google.com!google-groups.googlegroups.com!not-for-mail
Newsgroups: comp.protocols.kerberos
Date: Sat, 1 Oct 2022 08:08:43 -0700 (PDT)
In-Reply-To: <mailman.104.1664568428.8148.kerberos@mit.edu>
Injection-Info: google-groups.googlegroups.com; posting-host=108.44.231.96; posting-account=x_5fPwoAAAC5bAU5tjeqVfhlbG9E6nU3
NNTP-Posting-Host: 108.44.231.96
References: <AQHY1QeSEOygoj3850eV2AaUFgt1/Q==> <SA0PR09MB65397CAF7D4F6D48A3C7A8A49A569@SA0PR09MB6539.namprd09.prod.outlook.com>
<mailman.104.1664568428.8148.kerberos@mit.edu>
User-Agent: G2/1.0
MIME-Version: 1.0
Message-ID: <5ce6e25f-cab5-435e-9d9d-752de4dc7b89n@googlegroups.com>
Subject: Re: Authentication Indicators and Cross Realm Trust
From: todd.he...@gmail.com (Todd Heron)
Injection-Date: Sat, 01 Oct 2022 15:08:43 +0000
Content-Type: text/plain; charset="UTF-8"
X-Received-Bytes: 1602
 by: Todd Heron - Sat, 1 Oct 2022 15:08 UTC

On Friday, September 30, 2022 at 4:07:10 PM UTC-4, Machin, Glenn Douglas wrote:
> Can someone tell me if a TGT containing an authentication indicator will work over to a service principal in another realm which has a cross realm trust relationship?
>
> Thanks,
>
> Glenn
Given proper name resolution setup beforehand, then yes, it should work.

1
server_pubkey.txt

rocksolid light 0.9.8
clearnet tor