Form of enterprise principal names

Michael Osipov 1983-01-06 at gmx.net
Fri Aug 15 08:19:30 EDT 2014


Hi,

I just recently tried kinit -E with my corporate enterprise pricipal name
and was wondering about the format (kinit, klist):

michael.osipov\@company.com at REALM1.COMPANY.NET

As far as I understand ENT PRINC and RFC 6806, isn't that supposed to be
free of real realm names? I assumed to see

michael.osipov at company.com only.

Acquired services tickets will contain the former principal when 
canonicalize is not set to true.

What bit am I missing?

Thanks,

Michael

PS: Tried 1.14 from master


More information about the Kerberos mailing list