[37037] in Kerberos
Re: A client name with an '@'
daemon@ATHENA.MIT.EDU (Nico Williams)
Mon Jun 1 18:48:39 2015
Date: Mon, 1 Jun 2015 17:48:24 -0500
From: Nico Williams <nico@cryptonector.com>
To: "Nordgren, Bryce L -FS" <bnordgren@fs.fed.us>
Message-ID: <20150601224823.GC17122@localhost>
MIME-Version: 1.0
Content-Disposition: inline
In-Reply-To: <82E7C9A01FD0764CACDD35D10F5DFB6E7DFCFD@001FSN2MPN1-046.001f.mgd2.msft.net>
Cc: "kerberos@mit.edu" <kerberos@mit.edu>
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: kerberos-bounces@mit.edu
On Mon, Jun 01, 2015 at 10:04:46PM +0000, Nordgren, Bryce L -FS wrote:
> I then tried creating a "12001000550281@fedidcard.gov" principal in my
> realm. Unfortunately, I cannot kinit using the principal
> "12001000550281@fedidcard.gov@FEDIDCARD.GOV". kinit gives a "Malformed
> representation of principal when parsing name..." error.
You have to escape the first '@' with a backslah. Mind your shell
quoting, since your shell may require you to escape the escape
backslash.
On a typical Unix shell you could:
$ kinit 12001000550281\\@fedidcard.gov@FEDIDCARD.GOV
or
$ kinit '12001000550281\@fedidcard.gov@FEDIDCARD.GOV'
Nico
--
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
