[33218] in Kerberos

home help back first fref pref prev next nref lref last post

using '@' character in principals

daemon@ATHENA.MIT.EDU (Stephen Ingram)
Fri Feb 18 16:20:27 2011

MIME-Version: 1.0
Date: Fri, 18 Feb 2011 13:20:18 -0800
Message-ID: <AANLkTik5E2UD10=gAWFvU-5F_3f_Ybu77PxE1QW3y5pc@mail.gmail.com>
From: Stephen Ingram <sbingram@gmail.com>
To: kerberos@mit.edu
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: kerberos-bounces@mit.edu

Is it possible to use an '@' character in a kerberos principal such
that the full principal would read something like
user@domain1.com@DOMAIN.COM? Note that domain1.com is in the
DOMAIN.COM realm. I've been able to successfully add a principal like
this by using a '\' before the '@'. However, kinit doesn't seem to
pass the information similarly such that I can obtain a tgt.

It seems like some large installations accomplish this, but perhaps
they are using some sort of filtering before passing it to kinit?

Steve
________________________________________________
Kerberos mailing list           Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos

home help back first fref pref prev next nref lref last post