New answers tagged kerberos
Strictly speaking, both situations are not possible because they violate the trust semantics of Kerberos. By definition, the first scenario has a TGT into domain B and domain A doesn't trust it. Your second scenario is similar, except you may not even have a TGT because its local-only. (My statement assumes we are speaking about the use of Kerberos tickets ...
Top 50 recent answers are included