HP UX Kerberos Data Security Software HP’s Kerberos Server and Windows 2000 Interoperability

Interoperability With Windows 2000

HP’s Kerberos Server and Windows 2000 Interoperability

HP’s Kerberos Server and Windows 2000 Interoperability

When you set up inter-realm interoperability between the HP’s Kerberos Server software and Windows 2000, there are three basic cases, each with its own configuration requirement:

Case 1

A Windows 2000 user needs access to services in an HP’s Kerberos Server realm. Here, the HP’s Kerberos Server realm is the target realm; the Windows 2000 domain is the source realm. The HP’s Kerberos Server must trust the Windows 2000 domain controller to perform secure authentication.

Case 2

A HP’s Kerberos Server principal needs access to services in a Windows 2000 domain. Here, the Windows 2000 domain is the target realm; the HP’s Kerberos Server realm is the source realm. The Windows 2000 domain controller must trust HP’s Kerberos Server to perform secure authentication.

Case 3

Two-way trust must exist between the HP’s Kerberos Server and the Windows 2000 domain controller. Here, HP’s Kerberos Server principals and Windows 2000 users must access services in either realm or domain.

HP’s Kerberos Server software supports the Windows 2000 credentials cache.

Chapter 4 55