libapache2-mod-auth-kerb and cross-realm

[Russ Allbery]

Jaap Winius <jwinius at umrk.nl> writes:

> Unfortunately, this doesn't work. At first I thought I could get away 
> with using simply 'auth_to_local = DEFAULT', but apparently auth_to_local 
> mappings can only be applied to principals from the default realm.

Hm, I don't think that's the case with MIT Kerberos, although the Heimdal
documentation claims it is with Heimdal.  (But I'm not sure if the Heimdal
documentation has caught up with recent development there.)

-- 
Russ Allbery (eagle at eyrie.org)              <http://www.eyrie.org/~eagle/>