Re: Accessing Kerberos Authentication Database

From: Christopher Pragash (chrispragash_at_hotmail.com)
Date: 02/13/04 

Date: Fri, 13 Feb 2004 08:36:28 -0500

Hello,

Thanks for the response and Sorry to post the same question twice, it just
happened that I had a little more grasp on what I wanted to do and hence I
posted the second question with little more details. I still have one more
question, please bear with me, I'm a newbie to the world of kerberos
interoperability.

a) Based on the steps mentioned in the document, I have to make the windows
2000 server a domain controler and then create an active directory entry for
the unix host. Am I right?

b) Since this web app would be accesible over the internet, I have to create
a form in ASP to receive the user name password. How would I pass this
credentials to the Unix kerberos database for validation? How can I query
the database for other attributes of the user?

Could you please help?

Thanks again for your time and effort.

regards,
Chris

"S. Pidgorny <MVP>" <slavickp@yahoo.com> wrote in message
news:%23uvNm2i8DHA.3404@TK2MSFTNGP09.phx.gbl...
> You don't have to ask the same twice, the answer isn't going to be any
> different:
>
>
http://www.microsoft.com/WINDOWS2000/techinfo/planning/security/kerbsteps.asp
>
> --
> Svyatoslav Pidgorny, MVP, MCSE
> -= F1 is the key =-
>
> "Christopher Pragash" <chrispragash@hotmail.com> wrote in message
> news:eN8FfDc8DHA.696@tk2msftngp13.phx.gbl...
> > Hello Everybody,
> >
> > I am trying to access a Kerberos database under Unix (Solaris). The
> scenario
> > is, a Kerberos Database, under Unix, holds user credentials and some
other
> > information that I need. A user is trying to access a web site running
> under
> > MS windows 2000, IIS and needs to be authenticated. The user would
proivde
> a
> > user name and password and I have to validate the information against
the
> > Unix Kerberos database and retrieve some extra user information and pass
> > this information back to the Web Application under IIS. Could anybody
help
> > me in this, how I could achieve this task? Can I write an ASP script
> > etc....if so how, or if there other ways?
> >
> > Thanks,
> > Chris
> >
> >
>
>