Re: [Fed-Talk] Entourage/Mail CCL Users
Re: [Fed-Talk] Entourage/Mail CCL Users
- Subject: Re: [Fed-Talk] Entourage/Mail CCL Users
- From: "Timothy J. Miller" <email@hidden>
- Date: Thu, 24 Aug 2006 16:04:59 -0500
Henry, Joseph Mr US Army\Contractor wrote:
My user account has been CCL enabled so I can only use my CAC to access my
mail or Citrix now. How do I setup Entourage or Mail to use my CAC and pin
to authenticate me to the Exchange server?
You can't, at least not by yourself. Exchange isn't consuming the PKI
credential, it's consuming Kerberos tickets. CCL (AF calls it SCL) uses
the CAC to get you your Kerberos ticket-granting-ticket (TGT), and then
the TGT is used to get a ticket for Exchange.
If you could use your CAC on the Mac to get your TGT you'd be golden.
Unfortunately the only way to do this right now is with Thursby's
"ADmitMac with CAC" software, plus cooperation of your domain admins.
It remains to be seen whether this is built into Leopard's AD integration.
-- Tim
Attachment:
smime.p7s
Description: S/MIME Cryptographic Signature
_______________________________________________
Do not post admin requests to the list. They will be ignored.
Fed-talk mailing list (email@hidden)
Help/Unsubscribe/Update your Subscription:
This email sent to email@hidden