Single Realm (Domain) Authentication

Single realm interoperability scenarios involve one or more client systems in a given realm or domain that authenticate to a single KDC. Following are the interoperability scenarios that do not require interrealm authentication:

Single realm authentication requires all Kerberos server principals and Windows 2000 users to be entered in the same database regardless of whether that is a principal database on a Kerberos server or a Windows 2000 domain controller.

	IMPORTANT: In single realm authentication, principals can only access resources in their native realm. If a principal needs access to resources in a different realm, you must configure interrealm authentication.