Installing, Configuring and Administering the Kerberos Server V 2.0 on HP-UX 11i

Interoperability With Windows 2000
HP’s Kerberos Server and Windows 2000 Interoperability
Chapter 4 55
HP’s Kerberos Server and Windows 2000
Interoperability
When you set up inter-realm interoperability between the HP’s
Kerberos Server software and Windows 2000, there are three basic
cases, each with its own configuration requirement:
Case 1
A Windows 2000 user needs access to services in an HP’s Kerberos
Server realm. Here, the HP’s Kerberos Server realm is the target
realm; the Windows 2000 domain is the source realm. The HP’s
Kerberos Server must trust the Windows 2000 domain controller to
perform secure authentication.
Case 2
A HP’s Kerberos Server principal needs access to services in a
Windows 2000 domain. Here, the Windows 2000 domain is the target
realm; the HP’s Kerberos Server realm is the source realm. The
Windows 2000 domain controller must trust HP’s Kerberos Server to
perform secure authentication.
Case 3
Two-way trust must exist between the HP’s Kerberos Server and the
Windows 2000 domain controller. Here, HP’s Kerberos Server
principals and Windows 2000 users must access services in either realm
or domain.
HP’s Kerberos Server software supports the Windows 2000 credentials
cache.