Authenticating using lower case domain/realm
rra at stanford.edu
Mon Mar 9 21:30:48 EDT 2009
Luke Howard <lukeh at padl.com> writes:
> On 10/03/2009, at 3:17 AM, Santos wrote:
>> If i compile MIT kerberos 1.7 on ubuntu 8.10. Will pam_krb5 be able to
>> use those flags? Does the krb5.conf file have any settings to enable
>> those settings as default?
> It doesn't but you should be able to easily modify pam_krb5 to call
> krb5_get_init_creds_opt_set_canonicalize(), and to call
> krb5_parse_name_flags(KRB5_PRINCIPAL_PARSE_ENTERPRISE) rather than
> krb5_parse_name(). Of course, this should be made configurable.
Patch welcome from someone who can easily test it. :)
Russ Allbery (rra at stanford.edu) <http://www.eyrie.org/~eagle/>
More information about the Kerberos