Re: [modauthkerb] SSO With Multiple AD Domains

[Henry B. H. <ho...@jp...>]

OK, you got most of it.

On May 18, 2011, at 6:40 AM, Simon Young wrote:

> KrbServiceName HTTP/servicename@DOMAIN-A
> 
> Is it ok to specify just one service name? Could this cause problems?


No.  Specify:

KrbServiceName Any

You control which service names are acceptable by which ones are in the keytab file.  I've done this and it works like a charm.
------------------------------------------------------
The opinions expressed in this message are mine,
not those of Caltech, JPL, NASA, or the US Government.
Hen...@jp..., or hb...@ox...