Authenticating using lower case domain/realm

Luke Howard lukeh at
Tue Mar 10 19:34:07 EDT 2009

On 11/03/2009, at 3:30 AM, Santos wrote:

> Does krb5.conf have a setting to have the enterprise name as  
> default? I
> tried searching about it, but no success. Anyway, if pam_krb5 doesn't
> support this, the cause is lost anyway.

No, it doesn't (nor should it).

However, try the following (untested) patch to pam_krb5. Using 1.7, it  
should only be necessary to set the "use_upn" option, either in PAM  
libdefaults or pam.conf.

-- Luke

-------------- next part --------------

More information about the Kerberos mailing list