[30852] in Kerberos
Re: Authenticating using lower case domain/realm
daemon@ATHENA.MIT.EDU (Luke Howard)
Tue Mar 10 19:35:43 2009
Message-Id: <5439879E-41AD-4913-AD44-1E0756FA1064@padl.com>
From: Luke Howard <lukeh@padl.com>
To: Santos <sansancasd@gmail.com>
In-Reply-To: <d2912e600903100930m89abf2p7ea181cdd7f6aae1@mail.gmail.com>
Content-Type: multipart/mixed; boundary=Apple-Mail-955-722809400
Mime-Version: 1.0 (Apple Message framework v930.3)
Date: Wed, 11 Mar 2009 10:34:07 +1100
Cc: kerberos@mit.edu
Errors-To: kerberos-bounces@mit.edu
--Apple-Mail-955-722809400
Content-Type: text/plain;
charset=US-ASCII;
format=flowed;
delsp=yes
Content-Transfer-Encoding: 7bit
On 11/03/2009, at 3:30 AM, Santos wrote:
> Does krb5.conf have a setting to have the enterprise name as
> default? I
> tried searching about it, but no success. Anyway, if pam_krb5 doesn't
> support this, the cause is lost anyway.
No, it doesn't (nor should it).
However, try the following (untested) patch to pam_krb5. Using 1.7, it
should only be necessary to set the "use_upn" option, either in PAM
libdefaults or pam.conf.
-- Luke
--Apple-Mail-955-722809400
Content-Type: text/plain;
charset=US-ASCII;
format=flowed
Content-Transfer-Encoding: 7bit
--Apple-Mail-955-722809400
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
--Apple-Mail-955-722809400--
