[5188] in Kerberos
V5: Can principal names have '@' in them?
daemon@ATHENA.MIT.EDU (Jonathan I. Kamens)
Wed May 17 16:28:38 1995
To: kerberos@MIT.EDU
Date: 17 May 1995 20:06:33 GMT
From: jik@cam.ov.com (Jonathan I. Kamens)
With the V5beta2 release, running the command "kinit foobar@baz@GZA.COM" would
yield the message "Password for foo@GZA.COM:", and obvious indicator of a bug
of some sort in the principal parsing routine when it encounters two '@'s in a
principal.
V5beta4pl3, on the other hand, prints "kinit: Malformed representation of
principal when parsing name foobar@baz@GZA.COM". Now, that's *better*, but
I'm still not convinced it's correct, because I can't find anything in RFC
1510 that explicitly says that '@' is an illegal character in a principal name
component.
If it isn't, then "foobar@baz@GZA.COM" should parse into the principal
"foobar@baz" in the realm "GZA.COM".
Does the current working draft of what will replace RFC 1510 say anything
about this? Does anybody have any thoughts about whether '@' should be
an illegal character in principal name components?
--
Jonathan Kamens | OpenVision Technologies, Inc. | jik@cam.ov.com
