[36388] in Kerberos

home help back first fref pref prev next nref lref last post

Form of enterprise principal names

daemon@ATHENA.MIT.EDU (Michael Osipov)
Fri Aug 15 08:19:56 2014

MIME-Version: 1.0
Message-ID: <trinity-3f91d461-2ada-4530-845f-1f53ce2e65af-1408105169943@3capp-gmx-bs69>
From: "Michael Osipov" <1983-01-06@gmx.net>
To: Kerberos@mit.edu
Date: Fri, 15 Aug 2014 14:19:30 +0200
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: kerberos-bounces@mit.edu

Hi,

I just recently tried kinit -E with my corporate enterprise pricipal name
and was wondering about the format (kinit, klist):

michael.osipov\@company.com@REALM1.COMPANY.NET

As far as I understand ENT PRINC and RFC 6806, isn't that supposed to be
free of real realm names? I assumed to see

michael.osipov@company.com only.

Acquired services tickets will contain the former principal when 
canonicalize is not set to true.

What bit am I missing?

Thanks,

Michael

PS: Tried 1.14 from master
________________________________________________
Kerberos mailing list           Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos

home help back first fref pref prev next nref lref last post