Following are the possible interrealm interoperability scenarios
between the Kerberos server software and Windows 2000, each with
its own configuration requirements.
Scenario 1
A Windows 2000 user needs access to services in a Kerberos
server realm. Here, the Kerberos server realm is the target realm
and the Windows 2000 domain is the source realm. The Kerberos server
must trust the Windows 2000 domain controller to perform secure authentication.
Scenario 2
A Kerberos server principal needs access to services in a
Windows 2000 domain. Here, the Windows 2000 domain is the target
realm and the Kerberos server realm is the source realm. The Windows
2000 domain controller must trust the Kerberos server to perform
secure authentication.
Scenario 3
The Kerberos server principals and Windows 2000 users must
access services in the realm or domain. Two-way trust must exist
between the Kerberos server and the Windows 2000 domain controller.
Printable version
