[18941] in Kerberos_V5_Development
Re: SSO Application needs username from GSSName (or GSSAPI)
daemon@ATHENA.MIT.EDU (amit)
Tue Aug 5 08:27:41 2014
Date: Tue, 5 Aug 2014 04:55:33 -0700 (PDT)
From: amit <amitsggs@gmail.com>
To: krbdev@mit.edu
Message-ID: <1407239733053-41184.post@n3.nabble.com>
In-Reply-To: <CAK3OfOh-gxKHxdZYUaPxN1dJ8-bSAt+vpmqVPOgFKrkzankCaA@mail.gmail.com>
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: krbdev-bounces@mit.edu
Thank you Simo & Nico,
Simo, Nico is right about my application.
Please have a look at the following link which talks about realm name in
kerberos.
It says that you can have anything as a realm name but when it comes to
follow the conventions, realm name should be a domain name in capital
letters.
http://web.mit.edu/kerberos/krb5-devel/doc/admin/realm_config.html
So, assuming that customers will always follow the conventions of kerberos
and will keep the realm name as a capital letter of domain name.
Again, following link talks about what restrictions domain name have.
https://www.register.com/policy/domain-extension-rules.rcmx
So, it looks like domain name can never have '@' sign in it (which intern
says that realm name will never have the '@' sign in it).
Cropping the GSSName string with its last index of '@' will give me the
username.
Please let me know if I am mistaken somewhere.
--
View this message in context: http://kerberos.996246.n3.nabble.com/SSO-Application-needs-username-from-GSSName-or-GSSAPI-tp41081p41184.html
Sent from the Kerberos - Dev mailing list archive at Nabble.com.
_______________________________________________
krbdev mailing list krbdev@mit.edu
https://mailman.mit.edu/mailman/listinfo/krbdev
