[rt-users] Comprehension Question about LDAP and SSO

[Michael Brown]

On Thursday 03 Mar 2011 12:04:07 john s. wrote:
> And if i use another name like martin from the database the kerberos
> prinicipal changes also martin at ....

Yes.  The Kerberos principal will always be the name of the currently-logged-
in user.

> so it is possible to know which user from the  AD is logged in or out into
> the application which is authentificated with kerberos.
> 
> is that right?

Yes.

Michael