Mapping Kerberos jargon from UNIX to Windows 2003

I'm trying to set up a Windows 2003 server as a slave KDC where the master is a UNIX machine (Actually MAC OS X). The main problem I am having is I cannot understand the terminology used in Windows in UNIX equivalents.

For example, generating a keytab with ktpass is nothing like generating it on a UNIX system. The arguments used are foreign to me as a UNIX admin.

Is there a document somewhere, or can someone do a little hand-holding to get me through this? We can take it off-line if desired. TIA.

 

Try these links:

www.microsoft.com/windows2000/docs/Kerbinterop.doc

www.microsoft.com/windows2000/library/howit-works/security/kerbint.asp

 

Thanks for the links but I've already seen them (at least the first, the 2nd seems to be broken). Anyway, the way it works under 2003 seems to be different then 2000 so that documentation does not apply. There is really only 1 primary command for 2003 (ksetup) and the parameters it asks for do not make sense to me in so far as what they mean in Unix terms (ktadmin).

For example, how do I create a principal on 2003 for the master KDC? I cannot come up with the correct parameters for ksetup.