[30844] in Kerberos
Re: Authenticating using lower case domain/realm
daemon@ATHENA.MIT.EDU (Russ Allbery)
Mon Mar 9 21:31:49 2009
X-Barracuda-Envelope-From: eagle@windlord.stanford.edu
To: kerberos@mit.edu
In-Reply-To: <DBA6F037-B434-400E-B877-63660E6E4743@padl.com> (Luke Howard's
message of "Tue\, 10 Mar 2009 08\:51\:54 +1100")
From: Russ Allbery <rra@stanford.edu>
Date: Mon, 09 Mar 2009 18:30:48 -0700
Message-ID: <87r6165flj.fsf@windlord.stanford.edu>
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: kerberos-bounces@mit.edu
Luke Howard <lukeh@padl.com> writes:
> On 10/03/2009, at 3:17 AM, Santos wrote:
>> If i compile MIT kerberos 1.7 on ubuntu 8.10. Will pam_krb5 be able to
>> use those flags? Does the krb5.conf file have any settings to enable
>> those settings as default?
> It doesn't but you should be able to easily modify pam_krb5 to call
> krb5_get_init_creds_opt_set_canonicalize(), and to call
> krb5_parse_name_flags(KRB5_PRINCIPAL_PARSE_ENTERPRISE) rather than
> krb5_parse_name(). Of course, this should be made configurable.
Patch welcome from someone who can easily test it. :)
--
Russ Allbery (rra@stanford.edu) <http://www.eyrie.org/~eagle/>
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
