Way to get tickets

classic Classic list List threaded Threaded
2 messages Options
Reply | Threaded
Open this post in threaded view
|

Way to get tickets

Sergey Lapin
Hi all!!!
Sorry for (maybe) stupid questions, but anyway:

Our KDC is win2k3 server. We have a web server, that authenticate
users with Kerberos.
So, when user connects to web resource (apache web server) from our
LAN, no credentials asked. But, when he connects to this server from
outside world, it fallbacks to Basic auth. So we'd like to avoid this.

So, is it possible to travel for ticket from KDC to web browser (I
mean standard or least painful mechanisms)?

Thanks a lot
S.

Reply | Threaded
Open this post in threaded view
|

Re: Way to get tickets

Sergey Lapin
> If it's working locally then it's probably a network/NAT/firewall
> issue.  Or else the remote client's aren't configured the same way as
> the local ones.

So, if it is not accessible directly, then nothing is possible? Or
there is some solution
maybe non-trivial, to accomplish this?

Thanks a lot!