Anyone using Kerberos authentication with Exchange?

[Justin Beek]

We have ran into an issue where the Kerberos password is being remembered
even though it is being told not to. We also noticed that ever after
deleting the account - the Kerberos info remains...

Can anyone confirm this?
Or offer a suggestion how to stop it?

TIA,
Justin

 

[Corentin Cras-Méneur]

We have ran into an issue where the Kerberos password is being remembered
even though it is being told not to. We also noticed that ever after
deleting the account - the Kerberos info remains...

Can anyone confirm this?
Or offer a suggestion how to stop it?

I use Kerberos but I'm not seeing this.
There are some issues with the Leopard implementation of Kerberos. In my
case for instance, when the tickets expire, they won't self-renew and I
don't get any warning or prompt of any sort.

In any case, it looks like an Apple issue to me :-\

Corentin

 

[William Smith]

We have ran into an issue where the Kerberos password is being remembered
even though it is being told not to. We also noticed that ever after
deleting the account - the Kerberos info remains...

Hi Justin!

Kerberos does not use passwords; it uses tickets.

When you log in to your Mac the domain password is used once to gain a
ticket that's valid for about 10 hours by default.

When Entourage attempts to connect with Exchange, it passes the ticket
to the server and the server validates it, allowing access.

Unless you log out or purposely use the Kerberos application (found in
/System/Library/CoreServices) to destroy the ticket, it will remain
valid until it expires or is renewed.

Hope this helps!

--

bill

William M. Smith, Microsoft Interop MVP - Mac/Windows
Entourage Help Page <http://entourage.mvps.org/>
Entourage Help Blog <http://blog.entourage.mvps.org/>