Inter-realm

Hierarchical Inter-realm Trust

•krbtgt/IT.JUNGLE.COM@BAMBI.COM allows the server in IT.JUNGLE.COM to accept tickets from BAMBI.COM

Figure 8-1 Hierarchical Inter-realm Configuration

For inter-realm authentication in the other direction, two-way hierarchical inter-realm authentication, these principals must also be added:

•krbtgt/FINANCE.JUNGLE.COM@BAMBI.COM allows the server in FINANCE.JUNGLE.COM to accept tickets from BAMBI.COM

•krbtgt/BAMBI.COM@IT.JUNGLE.COM allows the server in BAMBI.COM to accept tickets from IT.JUNGLE.COM

254

Chapter 8