Ive hear Microsoft will support Kerberos in Windows 2000. Is that true?
This is true, but it is unclear how compatible Microsoft’s version of Kerberos will be with the standard. It is evident that some degree of incompatibility will exist; the exact extent of that incompatibility is unknown at this writing. What seems to be the case is that with the proprietary ticket extension created by Micrososft KDCs, a non-Microsoft KDC won’t be able to include any group membership information in the ticket. This may or may not impact you, depending on how critical Windows group membership information is to your Windows infrastructure. This article, written by Ted T’so, gives what I feel is a reasonable summary of the situation.
This is true, but it is unclear how compatible Microsoft’s version of Kerberos will be with the standard. It is evident that some degree of incompatibility will exist; the exact extent of that incompatibility is unknown at this writing. What seems to be the case is that with the proprietary ticket extension created by Micrososft KDCs, a non-Microsoft KDC won’t be able to include any group membership information in the ticket. This may or may not impact you, depending on how critical Windows group membership information is to your Windows infrastructure. This article, written by Ted T’so, gives what I feel is a reasonable summary of the situation.
