The following steps describe how to configure a workstation to be able to use cross-realm authentication. This allows a user to log on to a workstation that is a member of the UNITY Active Directory domain using MIT Kerberos credentials from the EOS.NCSU.EDU realm.
- Join the workstation to the UNITY domain. This is described HERE.
- You need to use the ksetup.exe utility. This is available in the Windows XP SP2 Support tools. The tools are available in either of the following two locations:
- Download from Microsoft
- \\unity.ad.ncsu.edu\ITD\Applications\Microsoft\Windows XP SP2 Support Tools
- Install the Support Tools. Select Complete as the installation type.
- Run the following command: (all one line)
"C:\Program Files\Support Tools\ksetup.exe" /AddKdc EOS.NCSU.EDU krb-rotate.ncsu.edu - Reboot your workstation.
When you log on to Windows, you should now see EOS.NCSU.EDU listed in the "Log on to:" drop-down box. You should be able to select this option and then log in with your Unity ID and password.
Sysnews
Unity Forums
Microsys Blog
Documentation