When you set up inter-realm interoperability between the HP's Kerberos
Server software and Windows 2000, there are three basic cases,
each with its own configuration requirement:
Case 1
A Windows 2000 user needs access to services in an HP's
Kerberos Server realm. Here, the HP's
Kerberos Server realm is the target realm; the Windows
2000 domain is the source realm. The HP's Kerberos
Server must trust the Windows 2000 domain controller
to perform secure authentication.
Case 2
A HP's Kerberos Server principal
needs access to services in a Windows 2000 domain. Here, the Windows
2000 domain is the target realm; the HP's Kerberos
Server realm is the source realm. The Windows 2000 domain
controller must trust HP's Kerberos Server to perform
secure authentication.
Case 3
Two-way trust must exist between the HP's
Kerberos Server and the Windows 2000 domain controller.
Here, HP's Kerberos Server principals
and Windows 2000 users must access services in either realm or domain.
HP's Kerberos Server software
supports the Windows 2000 credentials cache.
Printable version
