Next: , Previous: Inter-Realm keys (trust) between Windows 2000 and a Heimdal KDC, Up: Windows 2000 compatability


8.3 Create account mappings

Start the Active Directory Users and Computers tool. Select the View menu, that is in the left corner just below the real menu (or press Alt-V), and select Advanced Features. Right click on the user that you are going to do a name mapping for and choose Name mapping.

Click on the Kerberos Names tab and add a new principal from the non-Windows domain.

This adds ‘authorizationNames’ entry to the users LDAP entry to the Active Directory LDAP catalog. When you create users by script you can add this entry instead.