Fw: [cvsnt] Problem using cvsnt and gssapi

[Tony Hoyle]

Tony Hoyle wrote:
> It does, once you get AD to play ball.  On a pure Windows->Windows 
> connection it even works seamlessly, and Unix->Windows is hard but can 
> work (I can't work it out at the moment but have had it work in the 
> past) pretty easy.  Unix servers are the pain (I once got one of those 
> to work by accident and never repeated it).

One thing to note when trying this (I've actually got it to work, 
although I'm not sure I could repeat it - using the keytab functions in 
samba3 helps).  Windows has negative caching, so if you have ever failed 
to connect to a kerberos service you won't normally be able to connect 
to it until the next reboot.  For some reason specfying the realm 
bypasses this (:gserver;realm=foo:bar:/cvs).

Tony