Why, after authenticating to my “home” KDC via the kinit command, can I access my account at another DSRC?
Kerberos cross-realm trust has been setup between most DoD DSRC and DC Kerberos realms. As a result, Kerberos authentication from one site may be honored by most other sites. However, to use cross-realm trust, users must have a “.k5login” file placed in their home directories at their “non-home” sites. Generally, the “non-home” site System Administrator will place the appropriate “.k5login” file in the user’s home directory whenever the user’s account is established at that site. If user jimbob’s “home” is ASC.HPC.MIL, then jimbob’s “.
Related Questions
- I entered some IC Pro information, but when I went to the Home/Command Central page my points were taken away! Whats up?
- Why, after authenticating to my "home" KDC via the kinit command, can I access my account at another DSRC?
- Why, after authenticating to my "home" KDC via the kinit command, can I access my account at another MSRC?