[cvsnt] Re: SSPI across domain boundaries setup description?
Tony Hoyle
tmh at nodomain.org
Wed Sep 8 12:32:01 BST 2004
Oliver Giesen wrote:
> 6. Does the fact that (according to a note in the InstallationTips
> document) Windows NT 4.0 does not support Impersonation have any impact
> on the issue if the server one is trying to connect to is running on
> that platform?
It supports impersonation, just using the old hacky method (so you don't
get a true login & it's not audited).
> 6a. Any other NT4-specific issues to consider?
NT4 will only connect using NTLMv2 so you'll never get a kerberos
encrypted link. Over the internet though the same thing is likely to
happen anyway because of the way Active Directory is limited (you can't
get a ticket from the KDC unless you're on the local network) so it's
probably not much of an issue.
Tony
More information about the cvsnt
mailing list