[Freeipa-users] Windows XP Client problem

[Christian Horn]

Hi,

On Thu, Jan 24, 2013 at 01:36:04PM -0800, Eric Chennells wrote:
> [windows kerberos client]
> 
> Is anyone aware of if there is an LDAP related configuration needed? It
> seems like only setting up the kerberos authentication is not enough.

The only working way with unmodified [1] Windows as client is for Windows 
to use Kerberos from IPA for authentication.  Instead of LDAP the
user data has to be created locally.  So you bevore doing the Ker-
beros configuration you have to be able to log into the account.  After
the Kerb. configuration you can authenticate with the IPA password.

Christian


[1] So no pgina etc. used, just native Windows