WHy is this common syntax failing?

[Ken Raeburn]

On May 21, 2007, at 10:41, Owen Carter wrote:
> [realms]
> 	MIRABEAU.NL = {
> 	kdc = SERV1.mirabeau.nl
> 	admin_server = SERV1.mirabeau.nl
> 	auth_to_local = {
> 		RULE:[2:$1](johndoe)s/^.*$/guest/
> 		RULE:[2:$1;$2](^.*;admin$)s/;admin$//
> 		RULE:[2:$2](^.*;root)s/^.*$/root/
> 		DEFAULT
> 		 }
>         }
>
> When I did that, Kerberos stops working.

The documentation is wrong.  You need to use something like:

[realms]
   MIRABEAU.NL = {
     auth_to_local = RULE:blahblahblah
     auth_to_local = RULE:stuffheretoo
     auth_to_local = DEFAULT
   }

> (as a footnote; the error message could be much, much more  
> specific.. I mean, it doesn't even give a line number of where the  
> error is found in the file, let alone a true reason WHY it believes  
> the format is invalid.)

Yes, that would be a good improvement too....

Ken