[cvsnt] Re: SSPI across domain boundaries setup description?

Tony Hoyle tmh at nodomain.org
Wed Sep 8 12:32:01 BST 2004


Oliver Giesen wrote:


> 6. Does the fact that (according to a note in the InstallationTips
> document) Windows NT 4.0 does not support Impersonation have any impact
> on the issue if the server one is trying to connect to is running on
> that platform?

It supports impersonation, just using the old hacky method (so you don't 
get a true login & it's not audited).

> 6a. Any other NT4-specific issues to consider?

NT4 will only connect using NTLMv2 so you'll never get a kerberos 
encrypted link.  Over the internet though the same thing is likely to 
happen anyway because of the way Active Directory is limited (you can't 
get a ticket from the KDC unless you're on the local network) so it's 
probably not much of an issue.

Tony



More information about the cvsnt mailing list