[37156] in Kerberos

home help back first fref pref prev next nref lref last post

kinit: Mapping a local username to a Kerberos principal?

daemon@ATHENA.MIT.EDU (Lars Kellogg-Stedman)
Thu Jul 16 18:53:52 2015

To: kerberos@mit.edu
From: Lars Kellogg-Stedman <lars@oddbit.com>
Date: Thu, 16 Jul 2015 21:46:10 +0000 (UTC)
Message-ID: <loom.20150716T234216-214@post.gmane.org>
Mime-Version: 1.0
X-Complaints-To: usenet@ger.gmane.org
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: kerberos-bounces@mit.edu

Is it possible to configure my local Kerberos environment such that when I
type 'kinit' with no additional parameters, it will use something other than
'<my_local_username>@<default_kerberos_domain>'?

My username on my local workstation differs from my organizational Kerberos
principal name.  I'm currently using an explicit 'kinit
myprincipal@CORP.COM', but this doesn't integrate well with system tools
that might otherwise enable me to automatically acquire a token on login and
take care of renewing it for me.

The documentation for both 'auth_local_names' and 'k5identity' seemed
promising, but neither appears to do what I want.

Thanks for your help,

-- Lars


________________________________________________
Kerberos mailing list           Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos

home help back first fref pref prev next nref lref last post