[276] in Kerberos_V5_Development
Re: How do you map Kerberos names into account names?
daemon@ATHENA.MIT.EDU (Jerome H Saltzer)
Mon Sep 10 15:55:25 1990
Date: Mon, 10 Sep 90 15:54:48 EDT
From: Jerome H Saltzer <Saltzer@mit.edu>
To: krbdev@ATHENA.MIT.EDU
The following appeared in a late July message on the Kerberos list:
> Due to our fine sense of planning, and a few other problems as well, users
> have been assigned different names according to which computer they are
> running on.
This guy appears to need a feature that was originally planned for
Kerberos, but may not be fully implemented: a back-and-forth mapping
between the principal ID used by the Kerberos server and the login
ID used by the system. This would seem to be mostly a question of
whether or not login can cope, although some applications like rlogin
and pop might also break if the application presents a user name
different from the name in the accompanying ticket.
How much flexibility do the current application implementations have
for the principal id to be a string different from the login id?
Jerry
