none

[openafs-wiki.git] / AFSLore / ActiveDirectory.mdwn

diff --git a/AFSLore/ActiveDirectory.mdwn b/AFSLore/ActiveDirectory.mdwn
new file mode 100644 (file)
index 0000000..0f1186a
--- /dev/null
+++ b/AFSLore/ActiveDirectory.mdwn
@@ -0,0 +1,11 @@
+As of Windows NT version 5.0, normally known by the name Windows 2000, the domain controller (aka [[ActiveDirectory]]) uses [[KerberosV]] for authentication.
+
+The resulting TGT tickets use a proprietary authorization data format. There was a big flamefest on this issue, though [[KerberosDCE]] also uses the V5 ticket's authorization data field to store group membership data, the details of Microsoft's format was murky.
+
+[[NathanNeulinger]] has used Windows 2000 to provide authentication for AFS. See his [message](http://lists.openafs.org/pipermail/openafs-info/2002-January/002893.html) to [[OpenAFSInfo]] for details.
+
+-- [[TedAnderson]] - 23 Jan 2002
+
+----
+
+See [[KerberosV]], [[KerberosDCE]].