On Thu, 18 Aug 2011 09:17:50 +0100, Invisible wrote:

>>> Since Windows XP and higher use Kerberos, a protocol designed by
>>> people who have a clue, I'm guessing this kind of stupidity is gone
>>> now...
>>
>> Well, I remember in Windows Server 2000 (with the first release of AD)
>> that there were circumstances where NTLM authentication would be used
>> instead of Kerberos, and it wasn't always predictable.  So you could
>> actually end up with a real authentication nightmare in a distributed
>> environment
> 
> Ah yes. I think I recall there may have been some difference between how
> Windows NT and Windows XP authenticate. Maybe that's the issue I was
> remembering...

That could be.

> I haven't seen this problem in a long time. Then again, I haven't tried
> to set a really long password. (And I doubt anybody else has.)
> 
> I also have a vague recollection that NTLM didn't like certain
> characters in a password. But I don't remember which ones.

Now that you mention it, I think I ran into that as well.

Jim

Post a reply to this message